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Getting Started 

MaaS360 Mobile Device Management is a cloud -based multi-tenant platform that helps to monitor and 
manage your smartphones, tablets, and other mobile devices. MaaS360 is a comprehensive mobile device 
management solution that supports a variety of mobile device platforms including Apple iOS, Android, 
Windows Phones, BlackBerry and others. Ease of use, security and centralized management are some of the 
key features of MaaS360. 

The MaaS360 system allows you to perform portal administration functions, device management, software 
distributions, policy self-service and device compliance functions. Monitor and manage all your mobile 
devices from a Web-based portal. The MaaS360 real-time reports include rich intuitive, real-time and 
interactive graphical reports. 

You can register for a 30 day trial of the MaaS360 Mobile Device Management solution via the MaaS360 
website at http://www.maas360.com . 

After registering, a success message will appear. Click the green button to continue. 

The Quick Start screens will walk you through setting up your account and enrolling devices. 



Add a Device 

A manioc wilt be «<it to th« umt with 4 ofrie-tfi'n* to add a device 


LHemame . .rtA v 


Eme»l Address ■ y 


Domain - M»rtinK y 


Pfbbrte Number ijnU«f Slates of Amenta { 1 ) 



Note: The account you create as part of your trial will continue into Production if you purchase 
MaaS360. The devices you enroll as part of your trial will not need to be enrolled again. 

You will receive a welcome email containing important information about your trial. Be sure to keep this 
information, in case you need support later. 

Step 1 : Select Platforms 

MaaS360 is automatically configured to support Android, Windows Phone and BlackBerry devices. If these 
are the only devices you will be using, click Start without iOS to move to the next step, Add Devices. 
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If you will be using iOS devices, Apple requires you to have an Apple Push Notification service (APNs) 
certificate. MaaS360 will walk you through the process of obtaining this certificate: 

1 . Click Setup iOS Now. The Safari, Chrome and Firefox web browsers are recommended for this process. 

2. Enter a corporate ApplelD. You must use the same ApplelD every year when renewing your APNs 
certificate. 

If you don’t have an ApplelD, hover over Create ID? and click Apple Website. This will take you to a 
page where you can create a corporate ApplelD. 

Enter the ApplelD and click Next. 



Note: We strongly recommend that this ApplelD belong to your company and not an individual. The 
ApplelD you use to set up your devices is the same one you will need to renew your certificate 
each year. If you use a personal ApplelD and the person leaves your company, you will need to 
create a new ApplelD at renewal time and re-enroll all of your iOS devices using it. 

3. The Certificate Signing Request (CSR) will be generated automatically. This process can take up to 5 
minutes. Please remain on this page or you will have to redo the previous steps. 
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4. The CSR will be emailed to the specified account. You can also click the download link to upload it 
right away. 



5. After clicking the download link, you will be able to save the file. Saving it will put it in your 
Downloads folder by default. 


Cf-eat* Oertifkate Signing A.equH 


Save eh* CSR from your omoll or Download a copy For i* 


Jreatu CertiFicatB Apple 


Upload and Generate APhia 



6. Enter the ApplelD you used in Step 2 and the password, and then click Sign in. 

To skip the steps necessary to generate a PEM file, click Next. Continue with Step #12 . 
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G*t started EJ Create CartificeTe Signing Raquesi Q O-aat* Certificate *Hth apple Upload and Generate APNs 


Apple Pcrtal ^ 

Wait far the apple website to 
Loaoi and follow the steps, given 

1. Si-ar in Htth vour apple IE that 
you had entered la the lit step. 

2. Click Bn the button to tttttft 
a Certificate". £F prompted to 
accept the, u«h l ef a^faemont, 
do accept the terme to continue-. 

3. Upload the icrtlficntc Slgnlig 
Request fCSR} fit* that yep 
generated in the previous- step 

*, pn teedivlrig confirmation fy, 
click the "Oowntoad" (mean to 
get the '.p#m certificate 
generated bv ftpple, v-gu con 


Mppie rusn uerm icates rortai 


Sign in, 

sluikart@me.«n> 

Forgot your Aw*e ID? 
^easmPrd 

F«aiot yotif password? 



7. Click the green Create a Certificate button. 


CrtlM Mtitilt Hanka Ed Create Cart-ficace vrtti Apo-e 


Upload and Generate AFhs 


Apple Portal 


X. Sign in with you* Ap ? l* ED that 
you had entered m the 1st step, 

2, Click <h> the button to 'treat* 
a CertiFicat*'. If prompted to 
accept the terms i 
do accept the terms to i 

3 . Upload the Cert { cata Sign. - g 
Request (CSR) file that vou 
generated in the previous step 

4- 0-i receivirg confirmation ($/ 
dick the 'Download" butter, to 
gat tha '.pam' certificate 


Apple Push Certificates Portal 

Certificates for Third -Parry Servers 


Mature Device Manigerient Fiberlink Com rnun rsl ions- 
Mcjtufr Device JvUn age menu fi berlmk C'.ommuniirshpns 
Hotille Device Maddroepiem Fi d*i link Comm urtuilo ns 


Aug 20, 2013 
Wpv I. Ml! 
Nov 21. 2013 



Status 

Active 



8. Check the box next to I have read and agree to these terms and conditions and click Accept. 



Gat Sinned ^ Cruu Certificate Signing Request Q Cre-ste Ceraficab- wrh Apple Upload and Generate APt* 


Viur eornoam WMnizBlfcm ai edueattonaf kistHuum would lie Ia use Uie UDU CertiHeslfls Us dsm&d 

Apple Portal / 

Wait For the Apple vrtbsite to 
load and follow Hi* steps given 
belswi 

I , Sign in nith vo*ur Apple EO that 
you had entered in the 1st step. 

i. Click an the button to "Create 
a CeTtrhate”- [f prompted to 
accapt the terms of agreement, 
do aWept the terms to centinue- 
3- Upicad the Ce-rr-hcatu S*gn,ng 
Request (CSf.S Fila that you 
generated In the pravroui step, 

4. On receiving confirmation 
rf.uk the "bomnload" button to 
get the '.pern' certificate 
penerpted by Apple, You can 
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9. Now you need to find the file so you can upload it. Click Browse. 


Back Li quick. 


Get Sis*tod 



Create Cwti*cate Signing Request 


u 


CkrtifrUi« M ‘.1 AgpiS 


Apple Portal / 

Walt Tor the Apple website to 
load and falhra tti*. steps given 


t. Sign in «Uh vm* A^pl, ID that 
y«i had entered In the 1st step. 

2: dick on nil g-jSa-n to Chaste 
a Certificat*', ;f prompted l.u 
nrcect the terms of agreement, 
do accept the term to cojibnuB. 

a. Upload the Car-fr-tata Sign, n _ 
Request \C5H) hie that you 
generated In the pravfous step 

4- On receiving confirmation 
dick trie Download' button to 
get the '.pem 1 cSHtHifeto- 
generated bv app^e, Van can 


tt|jpit: rubn v_tn.iMLditi> rui Ldi 


Create a New Push Certificate 


Upload ynur Certificate Signing Request signed by your third-party server 

wndor to create a new puth certifkac*. 



Upload and tenBiaLs AJ*tts 



Bock 


10. Find the CSR.txt file in your Downloads folder. Click Open. 



1 1 . When the correct file is show in the field, click Upload. 
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Got Started 


Apple Portal ^ 


2. Click on the button to ’Create 
a Certificate', tf prompted to 
accept the terms of agreement, 
do accept the terms to continue. 

3. Upload the Certified* Signing 
"equest [CSR) file that you 
generated <n the previous step. 

4. On receiving confirmation . 
click the ’Download’ button to 
get the '.pern' certificate 
generated by Apple. You sen 


Create Certificate Signing Request Q Create Certificate with Apple 

Mppitf rubii Leim iLcueb ruridi 

Create a New Push Certificate 


Upload your Certificate Signing Request signed by your third-party server 
vendor to create a new push certificate. 


Upload and Generate APtle 


C.iJUderB'aluikarf'Downlo B m a w - j 



12. Click Download to download the PEM file. You will also receive this in email just like the CSR.txt file, 
but you will be using it in the very next step. 


Apple Portal ^ 

Wait for the Apple website to 
load and follow the steps given 


2. Click on the button to ’Create 
e Certificate*. If prompted to 
accept the terms of agreement, 
do accept the terms to continue. 

3. Uploed the Certificate Signing 
Request ICSR) file that you 
generated In the previous step. 

4. On receiving confirmation Q| . 
click the ’Download' button to 
gat tha '.pam 1 certificate 
generated by Apple, You can 


Craata Certificate S«gnlng Request Q Oeete Certificate with Apple 

Hppie rubii ^erunidieb ruridi 

Create a New Push Certificate 


Upload your Certificate Signing Request signed by your third-party server 
vendor to create a new push certificate. 


Upload and Generate AP*t 


C.'Users'aluikarflDownlo Browse 



13. Click OK to save the PEM to your Downloads folder. 
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Apple Portal ^ 

W*il fpi fh-4 Applp rebn-te t4 
load and folfcow th* steps given 

t- Sign in wth rvur Apple ID (hat 
you had entered in Eh* 1ft atop. 

2- Clicit on tee hittao to Create 

■ Centrfkata '- If prompted to 9 , 
accept the terms of agreement 
do |« 10 * th* tetmn to wrtihUi, 

3- Upload the Certrhcale _ going 
Request (CSR) file that you 
generated In the previpui step, 

4. On receiving confirmation 
■chde the "Download" buttpn tp 
get the '. pern' certificate 
generated by Ayjjle. You ran * 


Create Certificate Signing ftepLCSt 

Hjjpit; ruMi in i<w 

Confirmation ^ 

You have successfully created n n 
StlYlCC 


O-eete Certificate noth Apple 


OpMUig MDM^ FiberhfUtCaiiimurticaiiiOfti.Certificaie.pftfin 


You hav* chosen la open; 

fa* 

which ii a: pwn File 
fteUE htlpiV'/MJer'itity.apple.CDrti 
'ftfcat should Fireftra do with this file?' 


Open with j grows*,., j 
•# ' Save FBe 

[~ Do Ui* *otortMtkally for f ile. like th* horn mm o 



14. You will receive a confirmation message. Click Next. 


Create Certificate Signing Request 


Upload and Generate *PMs 


FJ 


Apple Portal ^ 

Welt for the Apple webilte to 
load and fallow Che steps given 

belfivi; 

3 . f.i B n in wth you* Apslte ID thibt 
you had entered n the lit itep, 

2 . Click on tee button to ’Create 
a Certificate" if prompted to 
accept the terms pF agreement, 
do accept the terms to tthnb nue, 

Upload the Certffcata Signing 
f-: -quell (C”" ) file that you 
generated In the previews step,, 

4- On receiving ijprtflrmetipn (J. 
dick the "Download'' button So 
gat the certificate 

generated by Appfe. You can 


M|j[_>ie rur>n uiiidies ruiLdi 
Confirmation $ 

You have successfu lly creeled a hew push ter liftLdLe with the following information 


Vervite Mobile Device Management 
Vendtjr Fipertvnk Ctenmuhications 
F-xpinniefi 0*1* Apt 9, JO 14 




15. Now you have to upload the certificate to MaaS360. Click Browse. 



16. Find the file MDM_Fiberlink_Communications.pem in your Downloads folder. Click Open. 
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17. Enter a password. This password has no minimum security requirement. To help you remember the 
password, you may want to make it the same as your ApplelD password. 


After entering it in the Create Certificate Password and Confirm Password fields, click Upload. 



18. The APNs certificate has been created. Click Close. 



19. MaaS360 will automatically take you to the next step, adding a device. 
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Step 2: Add Devices 


Click the second tab to begin enrolling devices in MaaS360. 



1 . Information from your enrollment will be automatically entered in the Username, Email Address and 
Phone Number fields, but you can override it. Review the Domain field; it is used for email and 
wireless set up, and more. 

2. Click Send Request. 

MaaS360 will send an enrollment request to the specified device. 



When the end user gets the enrollment request, they will be directed to download the MaaS360 app. With 
just a few taps, they will install the app and the device will begin to send data to MaaS360. 

Step 3: Play 

Now you can review information about the enrolled device, take actions like Lock, Locate or Distribute App 
and more. 


Quick Start 


3. Play 


A *_■ vat's iPad 


Passcode Encryption i? No Data Sharing Apps, 
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When you are finished, click Close Quick Start to access the MaaS360 Home page. 


Advanced Configuration Steps 


Services 


To review and configure additional services, mouse over the Setup tab and click Services. 



You can see the services that have already been set up and make changes. 

Note: The items you see on this screen depend on the services you have purchased. For more 
information about any additional offerings, please contact your service representative. 


Services 



Mobile Device Management 

Secure an your smartphones, tablets, documents and apps from a central console with real-time compliance rules and automated actions. Maa5360 gives you the tools you need to aam in sight into your enwonment. 
integrate moWe devices you* existing enterprise systems, enforce securer policies and streamline support lor your users, more, 


Q 


IdQ 


Document Management 

You hove jccuvs to Document Management. 


S& 


Mobile Application Management l« enabled 

You fvive .iCCtM to Mobile Applii .ilion M.m.igiment. 


H I aptnp and desktop Management 

Comprehensive enterprise mp.ihilitirs to manage and secure Mac OS x and Windows t nptops (s Desktops) through the entire lifecycle from enrollment to configuration, security, software distribifton, monitoring and 
updating patches, support and decommission, rr xe... 



Fnlrqiribr Fmail Inlrgrolimi 

fcnaWe visibility and control for a wide range of mobde devices that connect to your corporate mad server, more... 



End User Portal 

Ihe fcnd User Portal gives employees the required visibly and control for their mobile devices. 


Mobile Device 
Management 

If a platform has been set up for use in MaaS360, the icon will have a green 
checkbox in the upper left corner. You must upload an Apple MDM Certificate to 
manage iOS devices and a Symantec Code Signing Certificate to use the Windows 
Phone 8 Company Hub. 

Document Management 

Indicates that you can use MaaS360 Document Management. 
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Laptop and Desktop 
Management 


Specifies if you are set up to use MaaS360 to manage your laptops and desktops. 


ActiveSync Manager 


Specifies if you are set up to use ActiveSync to manage devices that connect to 
your corporate Exchange Server using the ActiveSync protocol. Integration with 
Exchange 2007, Exchange 2010, Exchange 2013, Office 365 and Microsoft BPOS- 
Dedicated is supported. 


You will need to download and configure the MaaS360 Cloud Extender. 


Lotus Traveler Manager 


Specifies if you are set up to use Lotus Traveler to manage devices that connect to 
your corporate Domino Server using the ActiveSync protocol or Traveler client. 


You will need to download and configure the MaaS360 Cloud Extender. 


BlackBerry Enterprise Specifies if you are set up to use BlackBerry Enterprise Server (BES) to manage 

Server Manager BlackBerry devices in your enterprise. 


You will need to download and configure the MaaS360 Cloud Extender. 


Enable End User Portal 


The MaaS360 End User Portal allows your users to perform actions on their own 
devices. When you enable it, MaaS360 will display a log in link that you can send to 
your users: 



Note: The MaaS360 Cloud Extender is discussed in detail later in this document. 

Before making a change, you will be prompted to enter your log in password as a security precaution. 
When you are finished, click Close. 

Configure the Enrollment URL, the EULA, and Support Information 

Access the Deployment Settings screen, which is found on the Setup tab. 



These enrollment settings are applicable to all your users. Make your changes, as needed, and click the 
Save button at the bottom of the page. 


16 



MaaS360* 


by Fiberl ink, an IBM company 


Deployment Settings 

Corporate Identifier* 1 71107111 | O 

^ Select Default User Authentication Mode 

<§) Using a unique passcode sent to user on your request o 
Learn more about how it works. 

O Authenticate against Corporate Active Directory 
© Two-factor Authentication 


* Device Platforms allowed to enroll 

0 iPhone 0 iPad 0 iPod 0 Android 0 Windows Phone 


✓ Advanced Management for Corporate iOS Devices 
□ Setup Supervised Devices using Apple Configurator 

Start by downloading Enrollment profile from "Bulk Deployment" option under DEVICES > Enrollments. 


□ Select Default App Store Region for iOS devices * 

□ Prompt user to accept your corporate usage policy while adding a new device * 

□ Prompt for ownership 0 
0 Corporate Information 0 

iOS Services Hostname [ <0 


Contact Email 


Phone Number 
Custom Instructions 


tit 


□ Alert administrator on new device discovery if} 




Save 


Corporate Identifier to be 
used in your Enrollment 
URL 

Your corporate identifier must be entered by your users when they enroll their 
devices. 

Select Default User 
Authentication Mode 

Specify how much authentication future device enrollments will require. You can: 

• Send a passcode to the user’s corporate email address, and require them to 
enter it during the enrollment process 

• Require the user to enter their corporate Active Directory credentials when 
enrolling and authenticate against it 

• Both of the above 

The MaaS360 Cloud Extender is required. 

Device Platforms allowed 
to enroll 

Specify which device types are allowed to enroll in MaaS360. 

Advanced Management 
for Corporate iOS Devices 

Specify if you want to use advanced management for corporate iOS devices. 

Select Default App Store 
Region for iOS devices 

Choose a default app store region from the pull-down menu. Users can change it in 
their individual app catalogs. 
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Prompt user to accept 
your corporate usage 
policy while adding a new 
device 

If checked, MaaS360 will display your usage policy to your users. They must read the 
policy and agree to it before downloading the MaaS360 app. 

When this box is checked, MaaS360 will allow you to browse to your usage policy and 
upload it. 

Corporate Information 

Any prompts for over-the-air actions scheduled for iOS 7 devices use the iOS Services 
Hostname. 

If you want to display a support email address and phone number in case your users 
need to contact you, enter the information in the respective fields. The information 
will appear in the MaaS360 app on the devices. 

Alert administrator on 
new device discovery 

Check the box if you want an email to be sent to an administrator when a new device 
is reported from your corporate email server or a new device. 

MaaS360 will allow you to specify which devices should trigger the alert: 

• All devices 

• Smartphones and tablets only 

• Laptops and desktops only 

It will also let you enter the email address that will be used for the notifications. 


Login Settings 

If you want to require portal administrators to use strong authentication, select Login Settings from the 
Setup menu. 


SETUP 


SERVICES & SETTINGS 

Services 

Deployment Settings 



ENTERPRISE INTEGRATION 

Cloud Extender 
Cloud Extender Settings 

PORTAL ADMINISTRATION 

Administrators 

Roles 

Administrator Logins Report 


Select the login settings you want, then click Save. 
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Configure Strong 
Authentication 

Select the checkbox to display the options. 

Allow administrators to 
log in only from 
previously registered 
devices 

MaaS360 will flag any device that has never been used to access it before, and will 
send the owner an email with a passcode. The person who is trying to log in must 
enter that passcode before accessing the portal. 

This only happens once-the device is automatically registered when the log in is 
successful. 

2-Factor Authentication 

Devices will be subject to the registration process and the administrators will have to 
enter their credentials when they log in. 


The MaaS360 Cloud Extender 

If you wish to gain visibility into your existing email platforms for Microsoft Exchange, Lotus Traveler, 

Office 365 or your BlackBerry Enterprise Server, you will need to install the MaaS360 Cloud Extender. 
Installing the Cloud Extender also allows you to use your corporate Active Directory or LDAP for self-service 
enrollment and visibility into your existing groups for management. The Cloud Extender can also be used 
to integrate with your Certificate Authority to push certs to devices to be used for email, wireless or VPN 
authentication. 

Mouse over Setup and click Cloud Extender. Click the links to download the Cloud Extender and to request 
the license key. 

For detailed installation instructions, refer to the MaaS360 Cloud Extender Installation Guide. 

Enterprise Integration 

You can see details about your MaaS360 Cloud Extender configuration by mousing over the Setup menu and 
clicking Cloud Extender. 
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SETUP 

SERVICES & SETTINGS 

Services 

Deployment Settings 
Login Settings 

ENTERPRISE INTEGRATION 


Cloud Extender 


Cloud Extender Settings 

PORTAL ADMINISTRATION 

Administrators 

Roles 

Administrator Logins Report 


This screen shows the steps to download the Cloud Extender, and lists your integration options. 


Cloud Extender 






flourt Extender & a piece of software that runs as a service an a Microsoft 
Windows Server m your network to allow for integration wth your 
corporate resources. 

Integration Options 

i User Authentication 

integrate with your corporate Active Directory 

la 

User and Groups Import 

Integrate with your Corporate Active Directory 

Step l: 

To integrate With your Microsoft fcxCfMngef^tjQ/t) or Trjvek;r unwrunmcni. 
enable the inquired service through EETUP>> Services. For other Integration, 
go to Step 2, 


or LDAP to alow self Service enrollment. 

Wofe: Alter configuring thrS sgrritx or) tlK 
Cloud Extender, go to SETUP Deployment 

Settings to update tee User Authentication 


Of LDAP to import existing us<r$ and user 
group Inrorhuttor lor management and access, 
control. 

Note: Any local user will be overwritten fly 

Step 

| □mb here to get ydor License Key. 


Mode. 


your corporate data. 

Step 3: 
Step 4; 

click here to download the Cluyd extender . 

install the Cloud txtender software to launch the ConfigurO t»n UOlty. 


Mihl Integration 

f nahle amo-disr nvf ry of dewees connecting to 
yoi.r mall environment. Once In place use the 
setting?, to control who ls mowed 7u connect 
using quarartOnC and block settings. 

Note: TJrjs service must be enabled through 
SETUP > > Services prior to u& c. 



Step 5: 

Futow the &tepS 111 tfie Good Extender Cui ilrgur atHjn UtMy to setup the 
required Integration. 

1 | 

CcrtiliLdh 1 Authority 





Distribute Cer Ll'Ciitub to devices U5.mg your 
existing MlcruisgEi gr Symantec; CcrtiEicate 
Authohty to use for authentication of matf, 
wireless or vpn. 




For more information, refer to the Cloud Extender Installation Guide. 


Cloud Extender Settings 

Mouse over the Setup tab and select Cloud Extender Settings. 


20 





MaaS360* 


SETUP 

SERVICES & SETTINGS 

Services 

Deployment Settings 
Login Settings 

ENTERPRISE INTEGRATION 

Cloud Extender 




PORTAL ADMINISTRATION 

Administrators 

Roles 

Administrator Logins Report 


This screen shows the different settings configured for your Cloud Extender and allows you to change them. 


You can click Edit to change the settings, or select an action from the menu in the upper right corner. 


View Audit History will allow you to see the changes that have been made previously. 


by Fiberlink, an IBM company 




M Auto- Quarantine Settings 


Enable Auto-Quarantine of Devices 

Note; In Exchange 2Q10 and Exchange 2013 r setting this to "Enable" will 
override Auto- Quarantine setting configured directly in the Exchange server 
and also clear any email addresses set for notification 


Disable 


! Data Collection Frequency 


Device Data Query Frequency 

Frequency at which Exchange Server is queried to determine changes to 
Device data. 

Device Heartbeat Query Frequency 

Frequency at which Exchange Server is queried to determine changes to Last 
Reported date of devices into Exchange Server. 

Full Data Refresh Day 

Day of the week on which all device and policy data is uploaded from 
Exchange Server to ensure all data is in sync. The Refresh will start at a 
random h'me on the specified day. 

Full Data Refresh Frequency 

Frequency at which all device and policy data is uploaded from Exchange 
Server. 


Every 15 minutes 


Every hour 


Sunday 


bdn £ Actions 


§ Actions 

View Audit History 
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Enabling Auto-Quarantine 

If you are using ActiveSync, MaaS360 can put all devices that attempt to access your corporate resources 
into quarantine automatically until an administrator approves them. 

To configure Auto-Quarantine, perform the following steps: 

1 . Click Setup > Cloud Extender Settings. 

SETUP 

SERVICES & SETTINGS 

Services 

Deployment Settings 
Login Settings 

ENTERPRISE INTEGRATION 

Cloud Extender 


Cloud Extender Settings 


PORTAL ADMINISTRATION 

Administrators 

Roles 

Administrator Logins Report 


2. Click Edit. 

3. Change the Auto-Quarantine Settings to enable the feature, and provide an email address that will 
receive notifications about quarantined devices. 



4. Click Save and Publish when you are finished. The policy will not go into effect until it has been 
published. 

The sample configuration shown above will do the following: 

• Any existing device will be grandfathered into an allowed list 

22 


MaaS360* 


by Fiberlink, an IBM company 


• Enrolled devices will be auto-approved 

• Manual Exchange configurations will be quarantined and the administrator will be notified 
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MaaS360 Home Page 

MaaS360 has been designed to make it easy for you to get information and take action quickly and easily. 



Navigation and the Ul 


The MaaS360 user interface provides an easy-to-use tab and menu navigation layout, allowing quicker 
access to the available applications. 


* 

DEVICES 

USERS 

SECURITY 

APPS 

DOCS 

REPORTS 

SETUP 


Tabs correspond to a related set of applications or tasks available to the portal user. 

The menus show the individual workflows, reports, etc. for the portal user. To access the menus, mouse 
over the tab and the menu will appear. Click once to access the item. 



Click to return to the Home page. 

When looking at an item from a list, you can click to return to the full list. 

Click to refresh the data. 

Search 

If you begin typing in the Search field, MaaS360 will give you possible matches to choose from among the 
devices, users, apps and documents in your environment. 
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mar) 


Devices 

1 — | Marketing2968 iPad 

View | Locate | Distribute App 



1 — ] Marketing2967 iPad 

4— 1 View | Locate | Distribute App 



1 — | DavidiPad 

^ View | Locate | Distribute App 


Users 

* kara 

View 



m marketingdemos 

View 


Docs 

Smart_Search_Results 

O View 1 Distribute 


When you see the item you want, you can take action by clicking the link below it; you can view, locate, 
distribute an app, etc. In the example above, you can click the Locate link under Marketing2968 iPad to 
display a map that shows the device’s location. 


Snapshots 

MaaS360 also gives you a snapshot of your environment at the top of the screen. 


r ? 115 

©©202 

.A? 70 

Ft' 38 

1 1 Devices 

Users 

/ \ Apps 

LJ Docs 


You can click one of the plus signs ' to add a device, user, app or document. 

ft 38 

I I Docs 

A 


Add Doc 


The text of each snapshot is a link. 
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Adds 

• Devices: Access the Device Inventory 

• Users: Access the User Directory 

• Apps: Access the App Catalog 

• Docs: Access the Content Library 

My Activity Feed 

My Activity Feed shows you important updates, in much the same way that social networking sites do. The 
list of new devices, rule violations (compliance events highlighted in red), etc. is updated in real time, and 
you can click on them to see details about the activity. 
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My Activity Feed show aii v_ 

Last Updated On: 5/9/2013 09:01 UTC 

[ 2 ] New Document: PM_Case_Study.pdf 
g New Document: DU_Case_Study.pdf 

[ 2 ] New Document: MaaS360_Cloud_Extender_-_Office365_Confi... 

New App: Hay Day Fan Wiki HD 
[ 2 ] New Document: import.csv 
[ 2 ] New Document: Copy_of_RFI.xlsx 
[ 2 ] New Document: FOODS Requirements. docx 
Policy Published: JN iOS Policy - Do Not Delete 

The Home page icon shows the number of new activities that have been added to the feed. In this 
example, there ,s one new activity: 

You can use the filter to display specific types of activities. 

My Activity Feed | Updates ^ 

Last Updated On: 5/9/2013 01:26 UTC 

Policy Published: JN iOS Policy - Do Not Delete 
Policy Published: JN iOS Policy - Do Not Delete 
Policy Published: JN iOS Policy - Do Not Delete 
Policy Published: JN Browser Policy - Do Not Delete 
Policy Published: Marketing - Jonathan 
Policy Published: Clint's IOS Workplace Policy 
Policy Published: Default Secure Browser Policy 
Policy Published: JN iOS Policy - Do Not Delete 


My Alert Center 


The Home page also displays My Alert Center, a dashboard of important information that you can 
customize to meet the needs of your organization. 


My Alert Center 

Last Analyzed: 05/28/2013 15:22 UTC + C Q ? 


H 51 iOS Devices 

■=■ Devices 


| 5 1 Remote Wipe Support 
■=■ Devices 


2 8 Persona[ Devices 
■=■ Devices 

1 4 Data Sharing Apps 
Devices 


5 Samsung Devices 

■=■ Devices 


/+ iOS Location Service 

U Devices Disabled 

H 3 Passcode Not Compliant 

Devices 


Roaming Devices 

■=■ Device 


| 1 High Data Usage 

tad Device 

Quarantined: Pending 
L=J device ActrveSync Approval 


Q Device Jailbroken 

■=■ Devices 



View less 
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The alerts are red, green or blue. Security alerts can be red or green, depending on if the situation needs 
attention. Information alerts are blue. 

Each administrator can customize their own alerts. They are not specific to administrators or global unless 
you want them to be. 

• Click T to add an alert 

/■* 

• Click w to refresh the data 

• Click Q to see Alert Center history 

9 

• Click ■ for the key to the alert color coding 

Alerts are set up using the MaaS360 Advanced Search feature. 

You can click on an alert to see the definition of the alert, and a list of the devices to which the alert 
applies: 



Creating an Alert 

To create an alert, click the plus sign on the Home page. 


Add Alert 


+ c © ? 

The Add Alert screen is displayed. 
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Add Alert 

Name & 
Description 

1 Enter Name Description. E,a, - o[ my devices are jallbroken u 








Type 

& Security C Info 




Scope 

S We (" My Organisation 




Condition 





1 . Search lor 

■:* Active Devices f Inactive Devices f Al Devices and 1 ast Reported in 

Last 7 Days 

r 


2, With device Type{s) F smartphones F Tablets 

3. Define Search Conditions 

Condition 1 | cateoorv v v 



9 


Condition 2 j ^ 1 ^ catejory v v 



9 


Condition 3 j ^ 10 ^ category v v 



9 O 

4, Apply 

rs AND C OR " Advanced criteria across the above conditio ns 



Cancel save 


Name fit Description 

Enter the name and description of the alert. The description will appear when you 
mouse over the alert. 

Type 

Specify if it is a security alert or and information alert. Security alerts will appear 
red or green, depending on whether the situation requires attention. Info alerts will 
always appear blue. 

Scope 

Indicate if the alert should be visible to you alone, or to you and the entire 
organization. 

Condition 

Define the alert. 

Search for 

Specify if the alert should apply to active devices, inactive ones or all devices. 

Provide the timeframe for the search; i.e., when the device last reported in to the 
system. 

With Device Type(s) 

Specify if the alert should apply to smartphones, tablets or both. 

Define Search Conditions 

Enter the criteria that devices must meet to be included in the alert. You can use 
Boolean operators if you want. 


Define your alert and click Save. 

Alert Center History 

You can see the changes that have been made to the alerts by clicking Q at the top of the screen. 
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Click the individual alert to see details about it. 



Additional Navigation 

There are a few more items at the top right-hand corner of the screen: 

Search 9 ? Beh O 

• Search: Begin typing a device name in this field to quickly find a device, user, app or document. 

• Chat Now: Click the icon to chat with a MaaS360 representative. 

• Help: Click the question mark to access help for MaaS360. 

• My Profile: Click your name to see your profile and to change it. 

You can see your account number (which you will need if you ever need to contact Customer Support), 
your username and your email address. 

You can change your background image, your time zone and the language that the portal is displayed 
in. You can also sign out of MaaS360. 


29 




MaaS360" 

by Fiberlink, an IBM company 


Account Id: 1000000 

Username: m d m_bbay 

Email Address: bbay@fiberlink.com 

Background: 

Time Zone: 

Language: 


Change Password Sign Out 

• Click the power icon to sign out of MaaS360. 



Modern 


[GMT) Coordinated Univ... 

V 


English 

V 
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Devices 


The Devices tab provides access to screens you can use to see your devices. You can also click the Devices 
link on the Home page. 

Inventory 

Select Devices > Inventory to see the Device Inventory screen, or click the Devices link on the Home page. 




The Device Inventory lists your devices. 


Device Inventory 
D*vi<« Name Uwirnanvc 

n«v« * Type * 

Ninulactunir 

Model 

l 

7 

I 

I I 

IMEI/MFTO 

Installed Data 

last H«JKirt*d 

C Save Column Preferences Go ta Smart Searcn Add Device 

Haillwa Managed Managed Statu* 


1 Cable 

Tablet 

App*e 

iPad 2 (WiFi Only) 

iOS6 


04/16/2013 15: IS 

05/09/2013 21:46 

ActrvaSync Manag 

Enrolled 


ecarfc-en 

Tablet 

App*e 

iPad 2 (CDMA) 

•OS 6 

A 120131CA 702013 

04/04/2013 14:20 

05/09/2013 12:23 

ActrveSync Manag 

Enrolled 

Trim* 1 * iPod 

slu*ale 

Tablet 

*PP»e 

iPad 2 (WiFi Only) 

iOS 6 


08/16/2012 15:28 

04/25/2013 00:23 

ActrveSync Manag 

user Removed Co 


J»*o 

Tablet 

AptAe 

iPad (3rd Sen, Ve 

toss 

201302013622013 

IC/11/2012 04:00 

04/24/2013 05:11. 

ActrveSync Manag 

Enrolled 

JvrStaror i iPad 

jszwan 

Tablet 

Apple 

iPad (3rd Gen, Wi . 

iOSS 


03/30/2012 15:51 

05/08/2013 15:26 

ActrveSync Manag 

User Removed Co 

***** 

b*br» 

Tablet 

Apple 

iPad (3rd Gen, ve 

iOS • 

990001297366333 

06/14/2012 00:28 

05/10/2013 12:24 

ActiveSync Manag 

Enrolled 


jlaper 

Tablet 

Apple 

iPad (Onpnal) 

iOSS 


10/25/2012 22:04 

04/26/2013 14:39 

ActrveSync Manag 

User Removed Co . 

memr,-GT-P62tO 

mairw 

Tablet 

Samsung 

GT-P62J0 

Android 4.0. « (tM 


08/09/2012 20:33 

04/30/2013 13:09 

ActrveSync Manag 

Enrolled 

JoeP*,-,™ 

jpop 

Tablet 

Apple 

Appie-iPad3C3: iP 

MaaS380/2 00 16 . 


03/26/2013 22:08 

03/07/2013 16:13 

ActrveSync Manag 

Not enrolled 

ecari-Kindie Fire 

ecari 

Tablet 

Amazon 

Kinrfe Fire 

Android 2 . 3.4 (Gl 


10/24/2012 19:41 

03/10/2013 13:30. 

No 

Enrolled 

Cist s iPad 

a st 

Tablet 

Apple 

iPad 2 (WiFi Only) 

iOS • 


01/17/2013 19:46 

03/10/2013 17:44_ 

ActrveSync Manag 

Enrolled 

Joshoa’s iPad 

jlamb 

Tablet 

Apple 

iPad mir» (COMA, 

lOS 6 

20 12 12392120 12 A 

11/29/2012 16:34 

03/09/2013 19:49. 

ActrveSync Manag 

En roSed 


You can use the filter to find specific devices: 



Click the Reset button to remove the filter and see the complete list again. 
You can change the columns that are listed by: 

1 . Click on the down arrow for a column heading L ^ ' Tvpe 

2. Select Columns, and then check the columns you want to include. 
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At the top right-hand corner of the screen are additional buttons: 

£r Save Column Preferences Go to Smart Search Add Device 

• Click '*■' to refresh the information. 

• Click Save Column Preferences to preserve the changes you made to the columns. 

• Click Go to Advanced Search to enter advanced search criteria. 

• Click Add Device to send an enrollment request to a device. 

Device Views 

The first device view is the Summary screen. 



Click to refresh the information. 

Additional screens are available by clicking the pull-down menu. Different screens may be listed depending 
on the device. 
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hone : sgaone-GT-I9100 

A Summary * Edit 
A Summary 
2 Hardware Inventory 
Operating System 
Network Information 
^ Location Information 
Security & Compliance 
Q Software Installed 
Running Services 
App Distributions 
Installed Services 
Change History 
(J) Action History 

• Summary: Basic information about the device, including network and compliance information. 

• Hardware Inventory: Detailed hardware and storage information about the device. Click Edit to 
update custom attribute information. 

• Operating System: The OS, OS version, kernel version, API level and more. 

• Network Information: Detailed information about the cellular network, Wi-Fi network and more. 

• Location Information: A map showing the last known location of the device. 

• Security 8t Compliance: Detailed information about passwords, encryption, the policy, data syncing, 
and more. 

• Software Installed: The apps on the device, including the version, size and type. 

• Modules (appears only if the Cloud Extender is installed for use with the BlackBerry Enterprise Server): 
The modules on the device, including the version and size. 

• Service Books (appears only if the Cloud Extender is installed for use with the BlackBerry Enterprise 
Server): The service books on the device, including the service ID and content ID. 

• Running Services: The services on the device, including the app ID, memory used, and running time. 

• App Distributions: The apps that have been distributed to the device by MaaS360; including when they 
were deployed and which ones have been installed. 

• Installed Services: Information about the MaaS360 app that is running on the device. 

• Change History: Information about changes made to the account. 

• Action History: Lists the actions performed on the device. 


Smartj 


ja 

-| Ha 

Main 

Opel 

Devi 

Maill 


-| Nel 

Phor 


Actions 


You can perform actions on the device from the Device View. 

Note: The Actions that appear depend on a number of factors, including the device type and how it 
is being managed, and if the Cloud Extender is installed for ActiveSync options, etc. Refer to 
Appendix A for details. 
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Smartphone : jlamb-SCH-1535 


i9 Summary *■ £ Actions 


Edit 



Useri 

& Refresh Device Information 
Last I ^ 



Locate Device 


- 1 Hardware Inventory 


Send Message 
(O) Buzz Device 


Manufacturer 


^ Lock Device 


Operating System Reset Device Passcode 

Device Serial Number 1!? Selective Wipe 


Mailbox Activated * wipe device 

Change Android Policy 

- Network Informatio ^ change Plan 


3c Wipe Device 


Phone Number Q Distribute App 

Last Reported Roaming 



f Change Rule Set 

I — | Security & Compliar 



Policy 


Device Rooted 


Hardware Encryption 


© Refresh Device Information 
£ Block Device 
£_ Change ActiveSync Policy 
r C^. Remove Device from Exchange Server 


• Refresh Device Information: Retrieves the most recent data from the mobile device 

• Last Known Location: Locates the mobile device 

• Send Message: Sends a message to it 

• Buzz Device: Sends an alert tone to help locate it in the immediate area 

• Lock Device: Sends a command that will lock it 

• Reset Device Passcode: Clears the current passcode 

• Selective Wipe: Deletes the Wi-Fi profile, Exchange ActiveSync profiles, and Web shortcuts configured 
on the device via MaaS360 policy. It can also remove apps and documents, if the appropriate options 
were selected when they were loaded into the App Catalog and Content Library, respectively 

• Wipe Device: Erases all data on the device and resets it to the original factory settings. For Android 
2.2, the Wipe Device action will reset only the phone memory. However, in Android 2.3, it will reset 
both the phone memory and the SD card 

• Change iOS/Android Policy: Allows you to change the policy being enforced on the device 

• Change Plan: Allows you to change the Mobile Expense Management plan 

• Distribute App: Distribute an app to the device 

• Remove Control: Allows you to unregister the device from MaaS360, and MaaS360 cannot manage it 
anymore. The first part of the process is a selective wipe of the device 

• Hide Device Record: Marks a device as inactive in MaaS360 reporting, but it does not remove control 
on the device. This should only be performed if the device is permanently offline, destroyed, etc. 

• Change Rule Set: Allows you to apply or update the rule set assigned to a device 

• Refresh Device Information (EAS): Refreshes the information shown for the device from Exchange 
ActiveSync 

• Block Device (EAS): Prevents the device from accessing your Exchange ActiveSync server 
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• Change ActiveSync Policy (EAS): Changes the policy being enforced on the device. These settings will 
be specific to Exchange ActiveSync 

• Remove Device from Exchange Server (EAS): Removes the device records from your Exchange 
ActiveSync server 

• Reset Device Passcode (BlackBerry): Clears the current passcode 

• Wipe Device (BlackBerry): Allows you to wipe data and settings deployed from MaaS360 

• Change BES Policy (BlackBerry): Changes the policy being enforced on the device 

• Remove Device from BES (BlackBerry): Removes the device records from your BES server 

• Block Device (Lotus Traveler): Prevents the device from accessing your Lotus Traveler server 

• Wipe Device (Lotus Traveler): Allows you to wipe data and settings deployed from MaaS360 

• Remove Device from Traveler (Lotus Traveler): Removes the device records from your Lotus Traveler 
server 

• Change Rule Set (Lotus Traveler): Allows you to apply or update the rule set assigned to a device 

• Hide Device Record (Lotus Traveler): Marks a device as inactive in MaaS360 reporting, but it does not 
remove control on the device. This should only be performed if the device is permanently offline, 
destroyed, etc. 

Custom Attributes 

Every device has a set of unique identifiers or attributes that are standard across devices. These attributes 
help in creating device groups that share similar attributes. 

In addition to the standard attributes, you can also use custom attributes. For example, if you want to 
group devices based on their location, you can base your group on the contents of the Office/Location 
field. 

You can add them as needed from the Hardware Inventory screen. Click Edit at the top of the screen. 
Click Save after making your changes. 
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One custom attribute, Important Device (Skip Enforcement Action), has special properties. If it is set to 
Yes, the device will be exempt from automated enforcement actions. 



You can upload a file with custom attributes so you don’t have to update each record individually. Select 
Devices > Custom Attributes to see the upload screen. 



Available for 

Select the group to be updated, or all users. 

Process Request 

Enter the filename with the information to be uploaded. 


Click Upload to upload the file. 

Click the Manage Custom Attributes button at the top of the screen to see all the existing attributes. 


Wnnaqe Custom Attributes 
1 ^, Note; Custom attribute* 

Business Unit 

ere disoleyed under 

AllrILule Type 

Tract 

'Custom Attributes' category. 

Cwrioil On 

Cl/M/Wli 16;Sft UTC 

Creeled fly 

mdm_jd 

Met HudHIwj [hi 

31/1473)911 L6;35 UTC 

tail HadlTitd By 

mrfmjif 

u V’ Bach fo Remits 

o 

Cost Center 

Text 

05/04/21311 10: 1C UTC 

mdm.k. 

35, via '331 L 19:15 URZ 

rmtmjee 

G 

Counts Provider 

Text 

(HrZaVMlt 15:39 UTC 

mdm_jbel| 

04/21/2311 IS; 39 UTC 

mdm_jbo4 

O 

Device Reported Last 

Boo seen 

34/25/20U 13:57 UTC 

mdmj* 

04/35.72012 13: 57 UTC 

mttrn_pt 

o 

Dtvlft 

BtrtfaBti 

iirafl/rcia 22:S8 LTTC 

"idm_efe 

11/QB/M12 12:04 UTC 


o 

Enclave 

Text 

05 / 22/2011 ibisc utc 

mrim_bb 

05/22/ 2011 19:50 UTC 

mdm_bb 

o 

Round Device 

Text 

oa/ta'KUi lit s 9 utc 

mdm_pt 

03/10^012 15:54 UTC 

m4m_pt 

o 

Location Detection 

Booieen 

05/1.9/3011 2i;8* UTC 

mdm_mr 

98/19/3312 3.1:06 UTC 

mdm_mc 

G 

Lost Device 

Text 

03/t2/2niZ UTC 

mdm^pt 

03/12/3012 12:49 UTC 

mdm^it 

G 

PEE niter 

Ttvl 

04/58/3012 16 ; 15 UTC 

mdm_d 

04/] 1/2012 16:16 UTC 

hntfm_d 

O 

Fending Control Removal 

Text 

01/24/2013 17:43 UTC 

mdm^sp 

01/24/2013 17; 42 UTC 

mdm_sp 

O 


Click Delete icon Q to delete the custom attribute, and click Back To Results to return to the previous 
screen. 

You can also click the Transaction Log button to see the upload history. 
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Bulk Update Transaction bay 






3 4* Bach To Results 

No Bulk Updates nre btng processEd. 







Upload 0 eta/ Time * 

Available far Uploaded Gy 

IP HiWniH 

Validalpoo Sltlus 

Upload Slain* 

Procasalup Time ... lololftacords 

Error* 


MmiZplI llrJfl UTC 

AH mdobjrfelBHi 

lfUMB,liSulG 


3udc«* 

a 13 

0 

* 

09/iWMlJ IStfE VTC 

AH ntdrri_b*n 

na.LS.iJH,sa 

Fsilrf 

Wfi d 

a 0 

2 

* * 

,i 4 pBsaJt tfl 1 

■■ P| Ditelnipna 1 - 3 Of 3 raw* 








You can see the file by clicking * , and you can see any errors by clicking ! . 


Groups 

MaaS360 supports two kinds of groups: device groups and user groups. You can see the available groups by 
selecting Devices > Groups, or by selecting Users > Groups. 

A device group can be a non-editable default device group, an editable public group, a non-editable public 
group or a private device group. You can search for devices matching specific search criteria and group 
those devices into a device group. A device group can be one of the following types: 


• Public-the device group is visible to all administrators, and can be edited and deleted by all 
administrators. Actions can only be taken on public groups. 

• Private-the device group is visibile only to the administrator who created the device group, and can 
be edited or deleted by the person who created it. 

Mouse over the More link associated with the group to view the available actions for it. 


Groups 


Type 

*a 

*& 

*6 


Name Apps 

Corporate Owned Devices ^ 

Devices | Edit | Delete | More... 

Devices Not Reported in Las 

Devices | Edit | Delete | M 
Devices with Passcode Out-i 
Devices | Edit | Delete | M 
Roaming Devices 
Devices | Edit | Delete | M 
All Devices 

Devices | Edit | Delete | M 

Smartphones 

Devices | Edit | Delete | M 
Tablets 


Create Copy 
Hide Devices 
Send Message 
Change Policy 
Change Rule Set 
Distribute App 
Distribute Document 
Remove App 


Different actions are available depending on the group. 

• Create Copy of Group: Create a duplicate group that can you can modify. 

• Hide Devices: Mark the devices in the group as Inactive in MaaS360 reporting. The Hide Devices action 
does not remove control on the devices. 

• Send Message: Send a notification alert to all devices in the device group. This action is applicable 
only for iOS, Android, and Windows Phone mobile devices. The Send Message action for BlackBerry 
devices includes the additional Message Type option. Select the PIN option to send an SMS message. 
Otherwise, select the Email option to send the alert notification as Email message. 

• Change iOS MDM Policy: Assign a specific policy to iOS devices in the group. 

• Change Android MDM Policy: Assign a specific policy to Android devices in the group. 

• Change Plan: Allows you to edit and assign a specific plan to devices in the group. This action is 
available only for devices that have enabled the Mobile Expense Manage module. 
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• Change Rule Set: Assign a compliance rule set to all devices in the device group. 

• Distribute App: Allows you distribute applications to devices in the group. 

• Distribute Document: Allows you distribute documents to devices in the group. 

• Edit Group: Allows you to edit the group. 

• Delete Group: Delete public and private device groups that you have created. It is available for private 
groups, but it is not available for device groups with automated actions or to public device groups 
created by MaaS360 or other Administrators. 

Advanced Search 

The Advanced Search allows you to perform basic and advanced searches for devices. Select Devices > 
Advanced Search. 



Search for 

Specify if you want to search for active devices, inactive devices or all devices. 

Last Reported 

Specify the time period in which the devices last contacted MaaS360. 

With Device 
Type(s) 

The options listed here will vary depending on what you have purchased. Specify the device types 
you want to include in the search. 

Define Search 
Conditions 

Specify the category, attribute and value being searched for. For example, to see all the devices 
that can support remote wipe, enter the following: 

Condition 1 security a compliance I Remote Wipe Support v Equal to v Yes v Q @ 


Apply 

Specify any Boolean operators that should be used to handle multiple search conditions. Enter the 
additional criteria in the text box. 


Q ft 

Click to add a row, and click v to remove one. 

Click Search to view results matching the selected criteria. The results will appear in the lower half of the 
screen. 

Your searches can be used for different purposes: 

• The alerts on the Home page are based on these searches 

• You can use these searches to define groups 

• You can customize the columns that appear in the results section 
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Defining a Group 


To use a search to define a group, perform the following steps: 
1 . Click the Create Device Group button. 



2. Enter details about the device group in the pop-up box. Enter the name of the group, a description, 
and specify if it is public or private. When you are finished, click Save. 



The search criteria will be saved and any actions that are performed will be done for all the devices in the 
group at that time. 

Customizing Columns 

You can also change the columns that are displayed. Click the ^ icon on a column heading, and then 
select Columns. Check all the columns you want to see. 
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jired search criteria, click Sear< 
s, click on any column and sel< 
ch Results, click "Save Column 


:ive Devices 0 All Devices 
7] Smartphones [7] Tablets 

)mpliance |vj | Devic< 

:ed criteria across the above c< 

nple: 1 AND (2 OR NOT~(iil 


* Manufacturer 


Sort Ascending 
Sort Descending 
HI Columns 


[7] Device Name 
[n] Device Owner 
[7] Username 
[n] Email Address 
[7] Device Type 
[7] Manufacturer 
[7] Model 

[7] Operating System 
O Service Pack 
|7] IMEI/MEID 
[7] Installed Date 
[7] Last Reported 

□ MDM Device ID 
[7] Mailbox Managed 
O Active Module Name 
0 Active Module Version 

□ ActiveSync Agent 

0 Advanced Device Management SDKs Enabled 
Q Agent Core Version 
0 Allow installation of Non-Market Apps 
[T] Allow Mock Locations 

□ API Level 

□ APNS Service Status 
|r1 App Compliance State 
[H Application Data (MB) 

FI Application Name 

in Approval Comments 

□ Auto Backup Configured 
O Auto-Backup Exclusions 
O Auto-Backup Frequency 
O Auto-Sync Enabled 

O Automatic Data Backup to Google Servers Enabled 

□ Automatic Restore from Data Backup on Application Reinstall 

in flyailahlp MpmnnrfMRl 


You can save your selections by clicking Save Column Preferences. 



Enrollment Requests 

You can see a list of the enrollment requests that were sent by selecting Devices > Enrollment Requests. 
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Enrollments (Add Device Requests) 


iJ Md Device 

Bulk Add Apple: Configunawf 

Swoamftncd Enrollment 


Status 

Devite... 

ItsernAme 

Domain 

Email 

Requested Fly 

Requested Rate t 

a 

rtew 

Detete \ Renew 


Iwarter 

fiberilnfc 

bcflrterefiberilnk.com 

fKarter@fibertnfc.mm 

05/06/2014 3fl:40 UTC 

n 

new 

Delete i Renew 


jvjnd ruff 

flbgrimk 

jvandmfffAfMjerfaik-oeirri 

)vflndruff 4 ii fibertnk.com 

OMftOH 35:16 VJC 

B 

New 

nafetfl ] Renew 


utharrearn 

ribemnlc 

vrhntvetHn@lltierSnk.ccim 

vthcrtleam@f1 EjefkrHt.com 

05/Q6/2Q 14 07:44 UTC 

B 

B 

new 

Detete 1 Renew 
new 

□elite J Renew 


vthoiitarn 

ebr&wn 

fiberilnk 
marts J60dz0i 

vttratiefintei fibertnk.com 
cbrowr1@nwbs3&Dd£.cOm 

vthot leamefiberilrHc.com 
ehrown gtflberfttik.com 

CS/C6/JQ14 04:41 UTTC 
05/05/2014 23:33 UTC 

O 

Hew 

□efcite \ Renew 


Cbrown 

maas:i£0£l7Ql 

cBrown@mAos36Cirl 7i.com 

cbrawn@fitHsiUnk.cem 

05/05/3014 CM 147 UFC 

B 

new 

Ocfctu j Renew 


vchottearn 

fttwtr* 

vrrioriMift$fibtirtnk-tem 

vThollEdm<|t.fibcf1lrrk.coni 

0S/05/2014 CW:30 UfC 

B 

Cum yletttJ 

jiaymoml- XI 
105B 

jadyrnumf 

maflSDGOdzOi 

]ra^rniumI@irnwa3G‘Dd£.tom 

Raymond 

03/05/2014 03:39 UTC 


Status 

Status of the request: 

• New-the request was just sent 

• Failed-an error prevented the request from being successful 

• Complete-the device was successfully enrolled 

• Pending-although the request was sent successfully, the device’s owner 
has not yet enrolled the device 

Device Name 

The registered device name. 

Platform 

Device’s platform. 

Request Date 

Date the enrollment request was created. 

Domain 

Domain provided in the request. 

Available for 

Group associated with the request. 

Email Address 

Email address to which the request was sent. 

Policy Set 

Policy that went into effect for the device when it was first enrolled. 

Registration Date 

When the device was successfully enrolled. 

Error Information 

Specifies why the enrollment request failed. 

Requested By 

Administrator who created the request. 

Comments 

Any comments about the request. They can only be seen by the administrator. 

Enrollment URL 

URL included in the request email. The recipient would have accessed the URL to 
enroll the device. 

Passcode 

Passcode that was included in the request email. The user would have needed to 
enter it to enroll the device. 


At the top of the screen are three buttons: B Send Enrollment Request B Bulk Enr °" ° ulk Deployment 


1. Send Enrollment Request: sends an individual enrollment request 
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2. Bulk Enroll: allows you to upload a .csv or .txt file with user information so you can send multiple 
enrollment requests simultaneously 

3. Bulk Deployment: allows you to enroll multiple devices via the Apple Configurator tool 

Action History 

MaaS360 can show you all the actions that have been performed on your devices. Click Devices > Actions 8t 
Events to see the list. 



Device Name 

Name of the device. 

Platform 

Device the platform is on. 

MDM Device ID 

Device’s ID. 

Action Date 

Date the action was taken. 

Action 

Action that was taken on the device. 

Action By 

Username of the administrator that performed the action. 

IP Address 

IP address of the device. 

Status 

Status of the action. 

Comments 

Any comments which were included with the action. 

Error Description 

Describes an error that was found while performing the action. 


Exceptions (Exchange ActiveSync and Lotus Traveler Only) 

Devices report into both the Exchange ActiveSync/ Lotus Traveler servers and into MaaS360. To maintain 
data integrity, MaaS360 tries to match the mail server record with the one it receives. 

iOS devices send a device serial number to the servers and to MaaS360, so there are rarely any difficulties 
matching these records. For other device types MaaS360 uses device-level attributes and built-in logic to 
match device pairs. 


The mail servers and MaaS360 have the following information from the devices: 

1. Email address 

2. Device manufacturer 
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3. Device types (smartphone, tablet) 

MaaS360 has a background process that compares each of them, in order. 

In most cases, that is enough information to match the records. 

If MaaS360 cannot make an informed decision about which devices belong together, the unmatched records 
will appear on the Exceptions report so an administrator can merge the records manually. 



The matching process runs approximately every 2 minutes, and the most recent execution time is shown on 
the report. Click *■' to refresh the data. 

Click View Merged Devices to see a list of the devices that MaaS360 has merged automatically. 


Device* Report 














Device (MDM) 

PUttomi Device ID (MOM) 

Fmari Address (MOM) Username (MOM) 

l ast Reported... Managed Status 

Device (Mailbox) 

Merged Date Merged By Actions 

O-GT-N7000 

£ 

android20732C73073 

a9ntaas360dz.com a 

03/03/2013 IB: Enrolled 


05/29/2013 02: Automated Maa Separate 

H • Paoefl of I < 


Displaying 1 - 1 of 1 records 






Click the Separate link to undo the merge process. If you separate a record, it will never be eligible for 
merging again. 
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Users 

MaaS360 gives you a quick, easy way to see all your users and device groups. There are two choices on the 
Users tab: 



Directory 

Select Directory from the Users tab to see the User Directory. 

USLKS SfcCUSUFY APPS 



You can also click the Users link on the Home page. 

214 

Users 


The User Directory shows your users. 


User Directory 






& Hide Users with rw D^rres 

Use man e 

F ii II Nani i' 

Un-main 

Email 

file Ins 

s™™ 

Last Updated lAate 

aarantieBt 

Vmm 

Test 

maai3-ancbDi. loci' 


Active 

User Q.-'tctc-'y 

BVllV3dt3 ?Ot3 1 UTC 

abide 

Via* 


maMSSDfl 

ad 

Aittv* 

USAf DiflWMfy 

Dsraa^du <nt4e urc 

a lark 


mm3SDdi<J] 


Active 

l«*f DmaaiKV 


admawtrator 

View 

Admirawater 

maaaKflthOl.leea^ 


Active 

User Cfrrarry 

OWlEMlS »;9l UTC 

TT 


mawStdaitl] 

ad Likn $ P be H i n k, cam 

Active 

Lucat EvraJtDry 

UB/Utt/MiZ lAr40 UTC 


Alan 

maBa3*nriSQi. local 

aEStor d maasTQOda.Dann 

Active 

Uaer DrectoT 

31/213, '2313 £lr39 UTC 

glojran 

a*far Kumiri 

m a bs35 D tSz 0 1 . 1 ocai 

Aa Tir'-'Lm i n S m a as 35 D db. so m 

Active 

User Ewcavi 

3S/12/20I3 30: 3 1 UTC 

alexa 


maas36DPzPl 


Active: 

Locat Dcectcr, 

dl,'3ZJ2ai3 31: 3S UTC 

i i 


rnau3SD£zCij 


Active 

Loza* nntctDff 

01/13/3312 33 :40 UTC 

apprewew 

Ape Ssuiaw 

maas3en(tiOi.i«*i 

appaMiawBmai&iSCdi.csm 

Active 

User Dsrenacy 

05/12/3IJ13 »:3S UTC 

2 ► H Displaying J - pF J04 Records 






C5V ' r Bcpprt 


You can filter the data by status (whether the person is an active or inactive user). 

Status Y Source 

Sort Ascending 
Sort Descending 

0 Active 

Inactive 

Clear All 
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Click Hide users with no Devices to filter out users who have no devices managed by MaaS360, and View 
All Users to see the complete list again. 


0 View Ail Users 

Lost Updated Dote 

05/17/2013 13:16 UTC 

You can get details about a particular user by clicking the View link. 

user Directory 

Username 

bada 

View 

bchris 

View 


You can see information about the person, the groups he or she is in, and a list of the devices that they 
have. 



Click on a device’s name to see the Device View . 

Groups 

Device groups allow you to deploy policies, apps or documents to similar categories of users. 

There are several default groups: 

1 . System: groups provided by MaaS360 

2. Public: can be used by all administrators 

3. Private: can only be used by the administrator who created it 

Note: Automated policy assignments and app distributions can only be scheduled for public groups. 
Select Groups from the Users tab to see all your groups. 
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Note: User Groups are also displayed on this screen. 

You can see any automatic actions for a device group by clicking the plus sign in the Applied Actions 
column. 

Click the Show all automated actions to expand the automated actions. 

A cti o ns sch e d u I e dl Fo r a uto m ati c exe cuti on- 

Yes tl Apply iOS Policy: Default iOS - Passcode Required Edit | Remove 

Apply Android Policy: Default Android Policy Edit | Remove 

Click Hide all automated actions to collapse them. You can click Show all automated actions to display 
them again. 

You can perform an action on a device group by selecting it from the pull-down menu: 



Note: The items you see on the pull-down menu will vary depending on the services that are 

enabled. 

• Hide Devices: Mark the group as inactive in MaaS360 reporting, but does not remove MaaS360’s control 
of the devices 

• Send Message: Sends a text message to the devices 

• Change iOS MDM Policy: Changes the policy being enforced on all the iOS devices in the group 

• Change Android MDM Policy: Changes the policy being enforced on all the Android devices in the group 

• Change Plan: This option is not visible unless you are using the Mobile Expense Management module. It 
changes the plan in effect for the devices in the group 
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• Distribute Package: This option is only visible if you are using the desktop/ laptop module of MaaS360. 
It distributes a Windows package to the devices in the group 

• Distribute App: Deploy an app that has already been uploaded to MaaS360 to all the devices in the 
group 

• Distribute Document: Distribute a document that has already been uploaded to MaaS360 to all the 
devices in the group 

• Change Rule Set: Change the rule set that is being enforced for the device group 

• Configure Patch Settings: This option is only visible if you are using the desktop/ laptop module of 
MaaS360. It lets you customize the settings for patches you push to the devices in the group 

• Refresh Group: Update the list of devices in the group 

• Edit Group: Change the criteria that defines the members of the group 

• Create Copy of the Group: Copy the group, usually so it can be the basis of a new group 
The available actions are slightly different for user groups. 



Note: The items that appear on the menu will vary depending on the services that are enabled. 

• View Devices: Show all the devices that belong to the users in the user group 

• Send Enrollment Request: Send an enrollment request to the users in the group 

• Change MDM Policy: Change the policy for the users’ devices. You will be prompted to specify either 
iOS or Android 

• Change Plan: This option is not visible unless you are using the Mobile Expense Management module. It 
changes the plan in effect for the users in the group 

• Distribute App: Deploy an app to all the users in the group 

• Distribute Document: Send a document to all the users that belong to the group 

• Change Rule Set: Change the compliance rule set that is in force for the group 

• Edit Group: Change the criteria that defines the user group 
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Security 

MaaS360 gives you the ability to customize the security you use for your devices. 


Policies 


Select Security > Policies to access the Policies screen. 



Name 


Name of the policy 


(Action Quick Links) 


Links you can use to perform common actions directly from the screen: 


• View: see the policy 

• Set as Default: make this policy the default policy for the device type 

• Audit History: show the changes that have been made to the policy 

• Delete: delete the policy 


Information icon 


Mouse over the icon to see the number of devices that have the policy. 


Policies 


Name 


Default Status 


Marketing Demo's Windows Phone 8 
View | Delete 

Groups Applied to: None 

Default Windows Phone MDM Policy 
View | History 

Groups Applied to: [John's Devices] 


o 


Draft 



Click the link to see a list of them. 


Default 


Status 


Precedence 


Available For 


If checked, this is the default policy for the specified device type. It will 
automatically be assigned to devices if no other policy is specified. 


Status of the policy. Only published policies can be given to users. 


If a device is included in multiple device or user groups, it could be subject to more 
than one policy. The precedence indicates which one will be applied, with the lower 
number having the higher priority. 


Specifies the device or user group that the policy can be assigned to. 


Note: This requires the Departmentalization feature , which is not enabled by 
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default. Contact your account representative for details. 

Type 

Specifies which platform the policy is designed for. Different platforms have different 
policy options. 

Version 

How many times the policy has been published. 

Last Modified 

The last time the policy was changed. 

Last Published 

The last time the policy was successfully published. 

A policy will not be published successfully if there are errors. For example, if you 
indicate that you want the policy to require a passcode but do not specify any 
requirements for the passcode (length, complexity, etc.) you will receive an error and 
the policy will not be published. 


Click View to see the policy. 


£ 


Default ios MOM Policy S 

Last Soccesski Publish: 06/06/2013 11:02 EDT [version: 1] 


Device Settings 


Configure P»t«rode Policy 


72 § Passcode 

Q Restrictions 

Application Compliance 
ActiveSync 
^ Wi-Fi 

ra VPN 


Advanced Settings 


hdit £ Actions . 


Click the Edit button at the top of the screen to change it. 

MaaS360 provides many choices so you can make your policy as relaxed or restrictive as you need. These 
settings may differ, depending on the platform (iOS, Android, Windows Phone, etc.). The settings are listed 

in Appendix A . 

Click the tabs on the left side to see the different settings. 
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When you are finished making changes, click Save and Publish. Your policy cannot be assigned to any 
devices until it has been published. 


Precedence 

Note: This feature is not enabled by default. Contact your account representative for details. 

In MaaS360, policies are dynamically assigned to different device groups, so the policy in force on a device 
can change as the circumstances change. For example, you can have a device group for a specific operating 
system version and assign a policy to it. When a user upgrades a device, the device would then become 
part of the new group and would get the associated policy automatically. 

As a result, it is possible for a device to be automatically assigned to multiple groups which have 
conflicting policies. 

Precedence allows you to prioritize polices so MaaS360 will apply the appropriate one if more than one is 
applicable. 

Click the Precedence button to view the Change Precedence dialog box, which lists the available iOS and 
Android MDM policies. 



You can change the policy precedence by dragging a policy box to the desired precedence level. Click Save 
to save changes. 
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Precedence 


Note: Drag and drop the policies to change the precedence. Click Save to continue. 

Click here to learn more about why you need to decide the precedence for your policies. 


<P 

-P 

-P 

£ 


iOS MDM Policies 
Default iOS MDM Policy 
Default iOS - Passcode Required 
JN iOS Policy - Do Not Delete 
UK Demo iOS Policy - with Asavie VPN 
Block Safari and 17+ 


Android MDM Policies 
Q Default Android Policy 
Qecar 

Q Marketing Demo's Android 
Q Pamid android 
Q kindle 


Policy Files 

Click the Policy Files button to see uploaded mobile device policy files. 



You can upload certificates, images and file containing mobile device settings. 


Policy Files 






flame ' 

Content Type' 

tmrteirt Sub Tyfur; 

Uptaoded By 

Uploaded Or 

Art*** 

Maa536Q flw Store Install 

Webdip Image [furiQS) 

PNG 

m*n_ci5 

wfi/ZS.' ZOll 19" 59 UTC 

X 

Fibdrfink 

Webdip im -igc for iOS) 

PNG 

mAn^cii 

05/10/2011 18:06 UTC 

X 

YauTiije Demo icon 

Web dtp Image {for K55) 

PNG 

nmnvjTski 

M/30/2011 00.21 UTC 

X 

TesUmage 

Webdip Image {fiords) 

PNG 

ntardEfiberiink.com 

06/15/ZQ11 15:27 UTC 

X 

Chang's 

WtMv Jmage {for jOS) 

PNC 

mdmjipano 

07/10/3021 1S:«UTC 

X 

airheads- ipnu- updated 

Device Sstfrngi (ret iOS} 

mobiieeoiifi§ 

nnlm_dalie 

03/00/2013 22:21 UTC 

X 

DZ Cert 

Certificate {tor k)5 and 05 XJ 

PKCS1 

mdmjbert 

Q3/22/2013 04:45 UTC 

X 

WcickGraphic 

HTML (Fpr Secure bowser) 

HTML 

rn*Ti_tnci 

01/Z9/ZQ13 ZZ:50UTC 

X 

an+w adadema- trust 

Certificate {far dS and OS X'; 

PKCS1 

jftdh^cile 

03/06/2012 20:29 UTC 

X 

airheadsdema ■ no trust 

Certificate (hnDS and 05 X) 

PKC51 

mdfir_adail 

03/08/2013 20:30 UTC 

X 

■e Q | Jump 

[Page 5 oF 2] Displaying records 1 ta jb ITotal records 12] 



UpJppd Ccrtont 


Click the Upload Content button to view the Upload Policy Files pop-up box. 


Upload Policy Files 

Content Name(max. 100 chars.):* 
Type:* 

Content: * 

1 


- Certificate ▼ 


iOS and OS X 


Supported: Type - PKCS1 Certificate files (*.crt, *.ce 

- Webdip Image 

- Device Settings 
Android 

- Certificate 

- Web Shortcut Image 

- Wallpaper Image 
Secure Browser 

- HTML 

Upload Content 
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Enter relevant name in the Content Name field. Select the desired Type. The available content types that 
you can upload are Certificates, Images and Device Settings. 

• Certificates: the Certificate type allows you to authenticate and register your mobile devices in 
the MaaS360 system. 

• Images: the Image type allows you to associate an image or a picture file with your document. 

• Device Settings: selecting the Device Settings option allows you to upload a policy file that 
contains the VPN, EAS and Wi-Fi policy parameters that you wish to apply to all devices that are 
registered using the certificate. 

Click Browse to select the content file from your local drive, and then click Upload Content. The Upload 
Status box displays. Click OK, and the file will appear on the list of policy files. 

Click the delete icon 51 under the Actions column if you wish to remove an uploaded policy file. 


MaaS360 allows you to apply compliance rules on mobile devices. Compliance Rule sets are conditions that 
are checked on devices on real-time basis. If a device is not in compliance with the defined rule sets or 
conditions, then appropriate enforcement actions will be taken on the device. 

Most mobile device platforms allow users to ignore and override passcode policies and application 
restrictions. Rules such as the Enforce MaaS360 Control are useful, especially to track users who 
accidentally or willfully try to remove their organization’s device management and control capabilities. 

It’s a good idea to use Compliance Rules to enforce actions, even if you already publish policies to your 
devices. 

Compliance rules allow you to take automated actions when a device is out of compliance. For example, 
the following rule will be invoked when a user installs a blacklisted app on a device: 


Only devices marked as Important on the View All Devices screen will be exempt from the automated 
actions that will occur when a device is out of compliance. It is a custom attribute . 

You can choose what action to take, a timeframe for the action (where applicable), and you can send a 
custom message to the user. 

Select Security > Compliance Rules to access the Compliance Rules screen. 


Compliance Rules 


> Enforce Application Compliance 

Ensure devices are in compliance with application management requirements 
(required, disallowed & white list policies). Application compliance is based on 
policy settings assigned to managed devices. 


Enforcement Action 


Selective Wipe 



Hours 


after warning 


Message (maximum 250 characters) 


This device is out of compliance with the corporate app policies. If the 
situation has not been fixed in 24 hours, all corporate data and settings 
villi be removed from the device. 
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The existing rules will be displayed. 



Rule Set Name 

Name of the compliance rule. It must be unique. 

(Actions) 

Click the link under the name to perform an action: 

• Edit: review the rule set and change it 

• Assign: apply it to group 

• Make Default/Clear Default: make this rule set the default 

• Audit: view the audit history of the rule set 

• Delete: delete the rule set 

Available for 

Specifies which groups the rules set can be applied to. 

Default 

If checked, this rule set is the default. 

Status 

Specifies if the rule set is active or inactive. Click the Show All button at the top of 
the screen to include inactive rule sets in the list, and click Hide Inactive to only 
display active ones. 

Precedence 

You can have devices with multiple rule sets assigned to them, depending on how 
your groups are set up. In those cases, the rule set with the lower precedence is the 
one that will be enforced. 

# of Devices 

Specifies how many devices have been assigned this rule set. Click on the number to 
see a list of those devices. 

Last Updated By 

Username of the person who last updated the rule set. 

Last Updated On 

Date of the last update. 


Compliance rules allow you to take automated actions under certain circumstances. For more information, 
refer to the Mobile Device Management Policies Best Practices Guide . 

To create a new one, click Add Rule at the top of the screen. Specify the group it is available for, the rule 
set’s name and an existing rule to use as a starting point. 
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Click Continue. The Basic Settings tab appears. 



Specify the platforms that the rule set will apply to, and enter the email addresses that should receive 
alerts for the rule set. 

On the Enforcement Rules tab, you can have MaaS360 enforce: 

• Enrollment in MDM 

• Specific operating system versions 

• Support for remote wipe 

• Support for block- and file-level encryption, or no encryption 

• Compliance with corporate app policies for blacklisted, whitelisted and required apps 

• Restrictions for jailbroken and rooted devices 

Note: Wipe allows you to wipe out all data on the mobile device and reset it to the original factory 
settings. In Android 2.2, the Wipe action will reset only the phone memory. However, in 
Android 2.3, the Wipe action will reset both the phone memory and the SD card. 

Note: The Block and Wipe enforcement actions are only available with Cloud Extender integration. 
For details, refer to the Device Actions section in Appendix A . 

Make your changes, and then click the next tab. 


54 



MaaS360* 


by Fiberlink, an IBM company 



Geo-Fencing Rules can be set up after you’ve created approved locations. You can change the policy in 
force on the device based on its location, or specify actions that should take place if the device is removed 
from one of the approved locations. 



Basic Settings 

t 

Enforcement Rules 

Geo-Fencing Rules 

life 

Monitoring Rules 

tnf 

Expense Monitoring Rules 


Enable Geo-Fencing Rules to enforce location related compliance for mobile devices. 

1. Enable Geo-Fencing enforcement to alert, change policy, or take action on devices that exit, or check-out of, approved locations. Locations can be created via 
'Manage Locations'. 

2. Select the action needed to be taken on devices that go out of compliance. Available actions can vary based on level of e-mail server integration. 

3. You can opt to specify an action grace period in hours or days. Grace period will give the user a chance to self-remediate violations, before the selection action is 
taken. 

4. If changing policy based on location, select the appropriate policy to apply when devices exits, or check-out of, defined location. 

5. Use the "Alert Administrator" action, if you don't want users to be notified when they check-out of the approved locations but would still want to be made aware 
of such instances. 


I — | Select Geo- Fencing Rule(s) 


> Enable Geo-Fencing 

Enforces the devices to stay checked-in at all times. You need to have defined 
locations before enabling this rule. You can define new locations by using the 
Manage Locations workflow. 

Enforcement Action 


Alert Administrator 


B 


Message (maximum 250 characters) 




Use the Monitoring Rules to monitor SIM changes, when a user’s device is roaming, and any operating 
system version changes. 



Make your changes and click the next tab. 

Note: Expense Management is available for an additional cost. Please contact your account 
representative for more information. 

Expense Monitoring Rules apply to mobile data usage. You can monitor both roaming and in-network data 
usage, and take action based on the usage thresholds. 
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Compliance Log 


The Compliance Status Overview report displays a list of all devices that are not in compliance with the 
configured compliance rules. 



Depending on the device compliance status, the Action Status column will display the Executed, Planned 
and the NA (Not Available) values. NA is displayed only for devices that are configured to receive 
compliance status alerts. 

When an out of compliance device is remediated and complies with the set rules, then the device name is 
automatically removed from the Compliance Status Overview list. 


Privacy 

Many employees are concerned about personal information from their devices ending up on corporate 
servers. MaaS360’s privacy settings can be used to limit the collection of Personally Identifiable 
Information (Pll) for personal devices. 

Mouse over Security and click Privacy. 
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On the Privacy Settings screen, specify how you want to treat Pll. Click Save when you are finished. 



Restrict Location 
Information 

Click to stop MaaS360 from collecting location information. This includes physical 
address, geographical coordinates and history, IP address and SSID. 

Select Applicable 
Ownership Types 

Specify which devices should be exempt from the collection of location information. 

Select Applicable 
Device Group 

Specify which device group should be exempt from the collection of location 
information. 

Restrict App Inventory 
Information 

Click to stop M aaS360 from collecting information about apps. This includes which apps 
the user has and data from those apps. Apps distributed from the App Catalog and apps 
that are included as part of the corporate security policies will be tracked. 

Select Applicable 
Ownership Types 

Specify which devices should be exempt from the collection of app information. 

Select Applicable 
Device Group 

Specify which device group should be exempt from the collection of app information. 


Click View Change History to see changes that have been made over time. 
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Locations 


Select Security > Locations to set up locations that can be used for geo-fencing rules. Locations can be 
based on geographical locations and Wi-Fi networks. 



You can see the details about each location, and policies that are using it. 

Click the Actions pull-down menu for one of the locations to perform an action on it. 


Last Updated On Actions 


01/23/2013 20:39 UTC -—Select Action- 


01/26/2013 23:19 UTC 


01/26/2013 23:20 UTC 


| Select Action 

- 

Select Action 

Edit 


Assign Policies 


Delete 

—1 


You can edit the location, assign a policy to it, or delete it. 

Click the Location Name to see the address and range for the location. 



58 



MaaS360* 


by Fiberlink, an IBM company 


Add an Address Based Location 

Click Add Address based Location. 



Enter the address and the range, and then click Search. 



Enter the location name and click Add this specific location with Range. 
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The location now appears on the Locations screen. 



Add a Wi-Fi based Location 

Click Add a Wi-Fi based Location from the Locations screen. 



Enter the location name, Wi-Fi SSID and MAC address. Click Add. 
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Applications 

The app management features of MaaS360 are accessed from the Apps tab. 


The App Catalog 

MaaS360 allows you to deploy apps to your users quickly and easily. Each app must be loaded into the 
MaaS360 App Catalog before it can be distributed. 

To access the App Catalog, mouse over Apps and click Catalog. 



The App Catalog lists your apps and provides basic information about them. 


App Cdtaluy 






£ Add - Show Deleted Apps More » 

flPLl 

Henx- 

Tye# 
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« 
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B 
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View | Distribute 1 Delete | More... 
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-MaatJ-M Browser 
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t 
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11/07/20 1> Itifll UTC 

1 
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You can sort and filter your apps by clicking on the column headings. 



At the bottom of the screen you can see how much storage you are using, and how much is available. It 
also includes token information. 



View 1 Distribute | Delete | More... 

Ar-surriN# 

VWiw a nil, tribute a Orlrt r | hate... 

VKi 

View I Distribute | Delete i Mare,.. 

> H 1>ejiJayifr0 1 . a D of Komrae 


t 
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T «*» Space 4va4»lri*: 1 'SB J Shw Semiring: MB t Tenant Uploaded : 


Cusronute Columns 


v« 
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There are links under each app you can use to take action. 


Adding an App to the App Catalog 

1 . Click the Add button to add an app. 
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App CnUluy 
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It expands so you can indicate the type of app. 




c\ Add - show Delet 


iTunes App Store App 

Search and pick from iTunes 

Enterprise App for iOS 

Upload your own private enterprise rOS App 

!■! Goog * e P'^v App 

Search and pick from Google Play 

Enterprise App for Android 

^Uj Upload your own private enterprise Android App 

Windows Phone Store App 

Search and pick from Windows Store 

gfl Windows Phone Private App 

Scedfy the Microsoft Deep Link 

gf| Enterprise Windows Phone App 

Upload Enterprise App for distribution via Company Hub 

[=rl Web App for iOS 

1=^ Add a browser URL (Web CSp) 


2. Specify if the app will be available to all users or a specific group, even if you do not plan to distribute 
the app to them right away. 

X 

iTunes App Store App 


Available for* 


App Source * 


| Change Region 

Remove App on 

MDM Removal & Selective Wipe 

[~ | Stopping Distribution 


| | Signout from Shared Device 


Security Policies 

Define app policies and behavior. 

I | Restrict Data Backup to iTunes 


Distribute to 

None 



Cancel Add 


3. Begin entering the name of the app. MaaS360 will present you with choices as you type. 
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iTunes App Store App 


7 


Available for* 
App Source 


Remove App on 


Security Policies 

Define app policies and behavior. 


Al l Users 
I medicall 



Calculate (Medica 

Device: iPhone, iPad 
Category: Medical 
Price: Free 

★ ★★★★ 



Medical Encydop.. 

Device: iPhone, iPad 
Category: Medical 
Price: Free 

★ ★★★★ 



Medical Wizards L ... 

Device: iPhone, iPad 
Category: Medical 
Price: Free 

★ ★★★★ 



Read: Personalize... 

Device: iPhone, iPad 
Category: Medical 
Price: Free 

★ ★★★★ 


Distribute to 


« 


5usmess 


Prognosis : Your 

Device: iPhone, iPad 
Category: Medical 
Price: Free 

★★★★★ 


HealthTap — free 

Device: iPhone, iPad 
Category: Health & ... 
Price: Free 

★★★★★ 


MedCalc (medical 

Device: iPhone, iPad 
Category: Medical 
Price: $ 1.99 

★ ★★★★ 



Lab Values Pro - ... 

Device: iPhone, iPad 
Category: Medical 
Price: $ 2.99 

★ ★★★★ 


- 


4. Spedfy the app removal, security and distribution options. 


Note: The security policies you used when uploading it into the catalog are in effect now. 



Different options are displayed depending on the type of app: 

• iTunes App Store App: 

o App Source: Enter the app’s name. Click Change Region if need to change the name of the 
country 

o Remove App on 

■ MDM Removal & Selective Wipe: The app will be removed if MaaS360’s control of 
the device is terminated, or if a selective wipe is performed on the device 

■ Stopping Distribution: The app will be removed if a pending distribution is ended 
o Security Policies 

■ Restrict Data Backup to iTunes: App data will not be backed up to iTunes 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 


64 



MaaS360" 


by Fiberl ink, an IBM company 


• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

• Enterprise App for iOS: 

o App Source: Enter the app’s name 
o Description: Enter a description of the app 
o Category: Enter a classification for the app 
o Screenshot: Upload screenshots for the app 
o Remove App on 

■ MDM Removal & Selective Wipe: The app will be removed if MaaS360’s control of 
the device is terminated, or if a selective wipe is performed on the device 

■ Stopping Distribution: The app will be removed if a pending distribution is ended 
o Security Policies 

■ Restrict Data Backup to iTunes: App data will not be backed up to iTunes 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 
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• Google Play App: 

o App Name: Enter the app’s name. Click Provide URL if you need to find the app in the 
Google Play store 

o Remove App on 

■ MDM Control Removal: The app will be removed if MaaS360’s control of the device 
is terminated 

■ Selective Wipe: The app will be removed if a selective wipe is performed on the 
device 

o Security Policies 

■ Enforce Authentication: Users must enter a username and password to receive the 
app 

■ Enforce Compliance: Devices must be in compliance to receive the app 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app. 
Instant Install is silent on Samsung SAFE devices 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

• Enterprise App for Android: 

o App Source: Upload the file. Click Provide URL to use a URL instead 
o Description: Enter a description of the app 
o Category: Enter a classification for the app 
o Screenshot: Upload screenshots for the app 
o Remove App on 

■ MDM Control Removal: The app will be removed if MaaS360’s control of the device 
is terminated 

■ Selective Wipe: The app will be removed if a selective wipe is performed on the 
device 

o Security Policies 

■ Restrict Data Backup to iTunes: App data will not be backed up to iTunes 
o Distribute to 
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- None: Load the app into the App Catalog without distributing it 

- Specific Device: Enter the device name and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app. 
Instant Install is silent on Samsung SAFE devices 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

- Group: Select the group of devices to receive the app and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app. 
Instant Install is silent on Samsung SAFE devices 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app. 
Instant Install is silent on Samsung SAFE devices 

■ Send Email: Recipients will receive an email telling them that the app has been 
added to their app catalog 

• Windows Phone Store App: 

o Windows Phone Store App: Upload the file. Click Provide URL to use a URL instead 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

■ Send Email: Recipients will receive an email telling them that the app has been 
added to their app catalog 

• Windows Phone Private App: 

o Windows Phone URL for App: Specify the URL of the app 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Send Email: MaaS360 will send them an email telling them about the new 
app 
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- All Devices: All your devices will receive the app. 

■ Send Email: Recipients will receive an email telling them that the app has been 
added to their app catalog 

• Enterprise Windows Phone App: 

o Available for: Specify who can receive the app (all users or a specific group) 
o App Source: Upload the file. Click Provide URL to use a URL instead 
o Description: Enter a description of the app 
o Category: Enter a classification for the app 
o Screenshot: Upload screenshots for the app 
o Remove App on 

■ MDM Control Removal: The app will be removed if MaaS360’s control of the device 
is terminated 

Note: Enterprise Windows Phone Apps are always removed if MaaS360’s control of 
the device is terminated or if a selective wipe is performed on it. 

o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ Group: Select the group of devices to receive the app and specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

■ All Devices: All your devices will receive the app. Specify: 

• Instant Install: MaaS360 will prompt the recipient to download the app 

• Send Email: MaaS360 will send them an email telling them about the new 
app 

• Web App for iOS: 

o Web App Display Name: Enter the app’s name 
o Web App URL: Enter the complete URL for the app 
o Web App Icon: Specify the icon you want to represent the app 
o Description: Enter a description of the app 
o Category: Enter a classification for the app 
o Remove App on 

■ Stopping Distribution: The app will be removed if a pending distribution is ended 
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Note: iOS Web Apps are always removed if MaaS360’s control of the device is 
terminated or if a selective wipe is performed on it. 

o Policies 

■ Install Automatically: App data will not be backed up to iTunes 

■ Launch in Full Screen: Launch the app in full screen mode on the device 

■ Visual Effects on Icon: The icon will be displayed with standard graphics 

■ Allow Users to Remove: Allow users to remove the app from the device 
o Distribute to 

■ None: Load the app into the App Catalog without distributing it 

■ Specific Device: Enter the device name 

■ Group: Select the group of devices to receive the app 

■ All Devices: All your devices will receive the app. 

5. When you have finished selecting the options you want, click Add. 

Note: The Secure Productivity Suite offers many more options for securing apps. For more 
information, contact your account representative. 


Viewing an App 

Click the View link to see detailed information about the app. 


+* El Jabber 
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Delete Distribute 
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You can see: 

• The type of app 

• The category 

• How many devices it was distributed to 

• How many have installed it 

• Any security policies in effect for it 

• An audit trail 
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If there are pending distributions, they will be marked with a red X. You can click the X to cancel the 
specified distribution. 

Distributing an App 

Click the Distribute link to choose the options you want for distributing the app. There are different 
options depending on the type of app. 

Different options are displayed depending on the type of app: 

• iTunes App Store App: 

o Available for: Specify who can receive the app, either all users or a group 

o Target: Specify if it will be deployed to a device, a group or a specific device 

o Instant Install (iOS 5+ devices): If you are using VPP codes for paid apps, recipients will 
not have to pay for the app 

o Send Email: Recipients will receive an email telling them that the app has been added to 
their app catalog 

• Enterprise App for iOS: 

o Available for: Specify who can receive the app, either all users or a group 

o Target: Specify if it will be deployed to a device, a group or a specific device 

o Instant Install (iOS 5+ devices): If you are using VPP codes for paid apps, recipients will 
not have to pay for the app. In addition, the users will not need to enter a password to get 
the enterprise app 

o Send Email: Recipients will receive an email telling them that the app has been added to 
their app catalog 

• Google Play App: 

o Available for: Specify who can receive the app, either all users or a group 

o Target: Specify if it will be deployed to a device, a group or a specific device 

o Send Email: Recipients will receive an email telling them that the app has been added to 
their app catalog 

• Enterprise App for Android: 

o Available for: Specify who can receive the app, either all users or a group 

o Target: Specify if it will be deployed to a device, a group or a specific device 

o Instant Install: Specify if the user will be prompted to install the app and the type of 
network: 

■ All Networks 

■ Wi-Fi only 

■ Wi-Fi and in-network cellular 

Note: Instant Install is silent for Samsung SAFE devices. 

o Send Email: Recipients will receive an email telling them that the app has been added to 
their app catalog 

• Windows Phone Store App: 

o Available for: Specify who can receive the app, either all users or a group 
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o Target: Specify if it will be deployed to a device, a group or a specific device 

o Send Email: Recipients will receive an email telling them that the app has been added to 
their app catalog 

• Enterprise Windows Phone App: 

o Available for: Specify who can receive the app, either all users or a group 
o Target: Specify if it will be deployed to a device, a group or a specific device 
o Send Email: Recipients will receive an email telling them that the app has been added to 


• Windows Phone Private App: 

o Available for: Specify who can receive the app, either all users or a group 
o Target: Specify if it will be deployed to a device, a group or a specific device 
o Send Email: Recipients will receive an email telling them that the app has been added to 


Deleting an App 

Click the Delete link to delete the app from the App Catalog. It cannot be distributed to anyone if it has 
been deleted, and any existing distributions will be stopped (this may remove the app from the devices). 

Click Show Deleted Apps to see all the apps that were deleted. You can only view them. 


Click the More link, and then click Distribution Details by Devices to see information about previous 
distributions. 


The Apple Store Volume Purchase Program (VPP) allows educational institutions to buy iOS apps in 
volume and distribute the apps to their users. The Volume Purchase Program allows developers and 
organizations to purchase large number of applications at special prices from the Apple Stores. 

MaaS360 will allow you to load VPP codes: 

1 . Find the app and mouse over the More link. Click Upload VPP File. 


their app catalog 


their app catalog 


• Web App for iOS: 

o Available for: Specify who can receive the app, either all users or a group 
o Target: Specify if it will be deployed to a device, a group or a specific device 


Add t Show Deleted Apps 


Distribution Details by Devices 






Apple Store: Volume Purchasing Program 
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E3 

TouchDown for iOS 

View 1 Distribute 1 Delete 1 More... 

0 

• 

(2^ 

Corp Web Site ^ Distribution Details by Devices L 

View | Distribute | Delete | Upload vpp File 

0 

YouTube ^ Mana9e VPP Codes 

J 

View | Distribute | Delete | More... 



2. Browse to the file’s location and select it. Specify the region, and click Override Redeemed Code 
Status if you want to make it possible for the status of redeemed codes to be updated. 



3. Click Upload. 


□□ 

You can also upload a file when viewing an app by clicking D * and then entering the upload information. 



You can manage or review the status of VPP codes by performing the following: 
4. Find the app. Mouse over More, and then click Manage VPP Codes. 
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P ^ eS 

View | Distribute | Delete | More... 


# 




i 4 


Keynote 

View | Distribute | Delete | More... 





Distribution Details by Devices * 


Cisco Any Connect 
View | Distribute | Delete | ^ upload vpp File 

o Manage VPP Codes 

Displaying 41 - 44 o._ 


5. You can see which devices used the codes and how many codes are still available for the app. 
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y Export 


6. Click the Upload VPP Codes button to upload another file of codes. Click Clear VPP codes to clear any 
unused codes. 
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Documents 

The Document Management features of MaaS360 are accessed from the Docs tab. 


Content Library 

MaaS360 allows you to distribute documents and files to your users quickly and easily. Each document must 
be loaded into the MaaS360 Content Library before it can be distributed. 

To access the Content Library, mouse over Docs and click Content Library. 



The Content Library lists your files and provides basic information about them. 



Click the highlighted number under Downloads to see the devices that have downloaded the file. 
You can sort and filter your files by clicking on the column headings. 

Downloads v> Enforce P 

Sort Ascending 
Sort Descending 

No Downloads 
Downloaded on 1 or more 


There are links under each document you can use to take action. 
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Adding Documents to the Content Library 

If you wish to add a new document, mouse over Docs and select Content Library. 


At the bottom of the page you can see how much free space is still available-you may need to delete 
documents before you can add the new one. 



Click the Add Documents button to upload documents that you wish to distribute to iOS and Android 
mobile devices. 




C Clear Filters Add Folder 

Add Documents 





Enter the details about the document. 


Add Documents 

All Docs 


Available for 


All 


Select Files * 

Multiple file selection (up to 15) supported. 
Selected folders will be ignored. 

l_ 

Browse... Provide URL 



Document Names * 

| Enter Document Names 

1 




Tags 

| Enter Comma Separated Tags 

1 

Security Settings 
Define security settings for selected 
documents. Supported only on iOS App 2.2+ 
and Android App 4.1+(with Secure Viewer). 

1 Restrict Export 

1 Restrict Cut/Copy/Paste 

Download Policies 

Configure download policies for documents. 
Supported on iOS only 

1 Password Protected 

1 Download Automatically 

1 Download only on Wi-Fi 


! Hide Doc Preview in App 

, Restrict Delete after 
— Download 

Distribute to 

None v O O 


Available for 


Specify the group that can receive the document. 


75 



MaaS360* 


by Fiberlink, an IBM company 


Select Files 

Browse to the file you want to add and select it. You can upload up to 15 files at a 
time. 

Document Names 

Enter the name you want your users to see. 

Tags 

Enter tags to help your users find the document, separated by a comma. 

Security Settings 

Specify the security settings that apply to this document: 

• Restrict Export: Users cannot open the document with another app. 

• Restrict Cut/Copy/Paste: Text in the document cannot be cut, copied or 
pasted into another app. 

Download Policies 

Specify the policies that apply to this document: 

• Password Protected: Users must enter a password to access the document 

• Download Automatically: The document will automatically be downloaded 
onto the device 

• Hide Doc Preview in App: A preview of the document will not be shown for 
file formats like iBooks where preview is not supported 

• Download only on Wi-Fi: To reduce costs, the document will only be 
downloaded on a Wi-Fi network 

• Restrict Delete after Download: Prevents users from removing a locally 
cached copy of the document 

Distribute to 

Specify if the document should immediately be distributed to all devices and users, a 
specific group, a specific device, or if it should not be distributed immediately 
(None). 

You can also enter an expiration date when the document will be removed from an 
individual device, a group or all users. 


Click Save. 

When prompted, enter your password and click Continue. 



Edit 


Click the Edit link to see detailed information about the document. 
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You can see information about the distribution, including the size of the file and any security that has been 
applied to it. You can also see the version history for the file. Click the red X to delete a distribution. 

For iOS devices, you can select Restrict Share and prevent documents from being opened with third-party 
apps. On Android devices it will prevent the content from going to the device. 

You can also specify the download policies for iOS devices: 

• Download Automatically: The document will automatically be downloaded onto the device 

• Hide Doc Preview in App: A preview of the document will not be shown. This is for file formats like 
iBooks where preview is not supported 

• Password Protected: Users must enter a password to access the document 

• Download only on Wi-Fi: To reduce mobile data costs, the document will only be downloaded on a Wi- 
Fi network 

• Restrict Delete after Download: Prevents users from removing a locally cached copy of the document 
After making your changes, click Save. 

You can also remove the document from the Content Library by clicking Delete from this screen. 


Adding 0 Version 

You may want to send different versions of a document to your users over time. 
Select the document, and click the Edit link. 


Content Library; All Docs 
Document 

MaaS36Q - MDM Made Simple 

Eefit j Distribute | Delete 


Available tor 

Type 

All 

0 
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Click Add Version. 



Browse to the new version and click Save. 



Enter your password and click Continue. 



The version history at the bottom of the screen will reflect the change. 



Distribute 

To distribute a document, click the Distribute link under its name. 


Document 

Available for 

MaaS360 - MDM Made Simple 

Edit | Distribute | Delete 

All 
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Specify if an individual device, a group or all users should receive the document. If you want to distribute 
the document to more than one target, click © . 

You can also enter an expiration date when MaaS360 will remove the document from an individual device, 
a group or all users. 

Click Distribute. 



Delete 

To delete a document, click the Delete link under its name. 


Document 

Available for 

MaaS360 - MDM Made Simple 

Edit | Distribute | Delete 

All 


Document Settings 

Select Docs > Settings to specify document policies and behavior. 



Restrict Share 

Users cannot open documents with third-party apps, email documents, or copy/paste 
the content. 

Password Protected 

Users must enter a passcode to access the document. The passcode will depend on the 
enrollment settings. For example, if the enrollment settings specify to use Active 
Directory credentials, the credentials entered to access document would be the user’s 
Active Directory credentials. 

Download only on Wi-Fi 

To reduce costs, the document will only be downloaded on a Wi-Fi network. 

Restrict Delete after 
Download 

Prevents users from removing a locally cached copy of the document. 

Download 

The document will automatically be downloaded onto the device. 
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Automatically 


Hide Doc Preview in 
App 

A preview of the document will not be shown for file formats like iBooks where preview 
is not supported. 


These are the default settings for all your documents. 

Content Sources 

MaaS360 integrates easily with your public environments, including SharePoint, Windows File Share content 
and Intranet sites. 

Note: If Private SharePoint is needed, you will need to install the MaaS360 Mobile Enterprise 
Gateway. For more information, refer to the MaaS360 Mobile Enterprise Gateway 
Administrators Guide. 

Click Docs > SharePoint Sites to display the Manage SharePoint Settings screen. 



You can see all your sites, the site URLs, the library/folder and the group access permissions. 
To add a new site, click the Add New Site button. 


Add Site 


Site Display Name* 

This is what your end user will see. 


Browser URL * 

Copy this from the browser where you 
access a SharePoint folder. 


E.g. Site Display Name: http://sp.mydomain.com, 
Library/Folder: 

http://sp.mydomain.eom/sub%20site/lists/forms/A 
llltems. aspx?RootFolder=Folderl/Test t 


Group Access Permissions 
Select group and set permissions. 


| all ii 


▼ View and Share 
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Cancel Save 


Enter the Site Display Name, the Browser URL, Site URL, name of the Library or Folder that you wish to 
share, Group Access Permissions and sharing restrictions: 

• View and Share: users can open documents with third-party apps, email documents, and 
copy/ paste the content 

• Restrict Share: users cannot open documents with third-party apps, email documents, or 
copy/ paste the content 
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Click Save. 

Click the Edit link under the site name to edit the settings, and Delete to remove the site. 

MaaS36Q SharePoint Demo 

http ://sp 

Edit | Delete 

1 Displaying 1 - 2 of 2 Records 
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Expense Management 

Note: This module may not be enabled for all users. Contact your account representative for 

details. 

The Mobile Expense Management (MEM) module lets you enable mobile data usage tracking for specific 

devices. 

• Plans can set up in-network and roaming data usage limits. 

• Alerts can be set up to be automatically triggered when the user reaches or exceeds the specified 
threshold criteria. You can also specify the action to be taken by the device on exceeding the data 
usage limit. When devices reach the usage threshold limits, the specified alerts are automatically 
triggered. 

For iOS and Android devices, the MEM feature is enabled only if the selected device is associated with an 

MEM plan. 

Note: MaaS360 allows you to perform only usage-based tracking and not cost-based tracking. 

Mouse over the Expense tab and click Manage Plans to see all your company’s plans. 


Manage Plans 
Plan Hume 

DclduH Slain* 

Available Far 

First day «f Ihe Bil... Pulrli thed Version Last Motfiltad Dale - 

3hu* At Flint Crta’j New plan S 

AeUfttt 

OK Data - 

Publish ed 

Etifcne Aeasurtt 

1 

1 

QMi/Mu mat ore 

£ Addons - 


PuWisb«l 

CPS 



02/0H/2G13 15:38 UTC 

£ Adlans - 

Oats - Hiflh 

Flabltdned 

Entrt Aceaurit 

i 

1 

02/0a/MiJ lSiuumc 

^ Adtians 7 

CWTfrZaMM. 

PutfifrHtd 

Ebb** Afivwm 

9 

1 

02/M/2013 I9n3 UTC 

£ Actions - 

JG8- Oaton-ti*. 

PnbJithed 

Efibea Asafiuert 

15 

1 

01/31/2013 SilOB UTC 

§ Adlans - 


OfHfT 

EttW 



01/31/2013 2 1 : 5l LTTC 

£ Adlans ' 


You can toggle between seeing all the plans and only seeing the active ones by clicking the appropriate 
button at the top of the page. The text on the button changes depending on what is being displayed. 




Hide Inactive 

Create New Plan 

M_S 


You can click on the plan’s name to see details about it. 



You can choose an Action from the pull-down menu or click Edit to update the plan. 
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£ Actions ' r Edit 
q Deactivate Plan 
View Audit History 
^ Set Default 


st S 


• Deactivate Plan: Make the plan inactive. Any devices currently assigned to the plan will not have a 
plan; their usage will not be tracked 

• View Audit History: See the actions that have been taken on the plan, including when it was published 

• Set Default: Make this plan the default plan 

Creating a New Plan 

To create a new plan, perform the following steps: 

1 . Click the Create New Plan button. 






Hide Inactive 

Create New Plan 




2. The Create Plan box appears. 



3. Specify the group that can have the plan, the plan’s name and a description. Click Continue. 

4. Enter the plan details. 



First day of the Billing 
cycle 

Specify the day of the month on which the billing cycle begins. 

In-Network Mobile Data 
Usage Limit (MB) 

Specify the in-network data usage limit. 
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Roaming Mobile data 

Specify the roaming data usage limit. 

Usage Limit (MB) 



5. Click Save & Publish when you are finished defining the plan. 


/ 


Actions T 

Save & Publish 

Cancel 





The plan can now be deployed to users. It is only available to those in the group you originally specified in 
Step #3. 

The plan will be in Draft status until it is published. It cannot be used until it is published. 

Changing an Existing Plan 

1 . Find the plan on the Manage Plans screen. 


Manage PFdns, 
Plan Nulfie 

Default Status 

Available Far 

First day ot the Bil... PuMiihed Version Last Modi lied Data - 

Sho* 41 Flint Cruu New /"an S 

AcU m 

OK DiU - Hull* 

Published 

Etifeird Iftduffl 

1 

1 

02/5l/20lS 11:31 OTC 

£ Actions - 

c^. 


CPS 



01/08/1013 15:15 OTIC 

£ Actions - 

Data - Hiflh 

Pi*tisheii 

Entvd 

1 

1 

oi/od/aou is: ii one 

/ Actions ' 

Csrriflr S&S Date Pfln 

PutH.Otiid 

Efiferd AeroWit 

9 

1 

02/03/3015 19;*3 OTC 

£ Actions - 

JG8- 

ftublithed 

Eht*?d Aftduffl: 

15 

1 

01/31/1013 22:09 k/TC 

§ Actions - 

Wl.llv 01*108 

Oran 

Ettfead Aeeoi^t 



01/51/2013 2 l;51 VT1C 

£ Actions - 


2. Select Edit Plan from the Actions menu: 


£ Actions '• 
(j^ Edit Plan 

Deactivate Plan 
[Q[ View Audit History 
igj Set Default 




3. Make your changes to the plan and click Save & Publish when you are finished. 

Deactivating and Reactivating a Plan 

To deactivate a plan, perform the following steps: 

1 . Select Expense > Manage Plans. 

EXPENSE REPORTS 

Manage Plans 


2. Find the plan you want and select the Actions menu for that plan. 
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Manatfti Plans 





Shniv All Ran; Create Nen Flan tJ 

Platt Nitrite 

Default Status 

Available Fa* 

First tlav t»r lilt Bit... Published Vers foil 

Last Hodiliad Dale - 

Afittns 

Twit 

PuMttad 

Entity AKtolrt 

LO 1 

D5/iS/iflt3l5:BljTC 


/ Action ’ 








\ j Edit Ptan 


JGB- LATAM 

Put*i had 

•Ertiri Aetouitt 

2 i 

fl5/33/S!ll3 i UTC 


^ De-nctlvalc Plan 


3G0 L*T*M 

#hib*3t*d 

Ertife Account 

a i 

D5/17/MLS LlTC 


ijj View Audit Hiritorv 








ft; Set Default 






3. Click Deactivate Plan on the menu. Click Continue when you see the confirmation message. 


Deactivate Plan 


Are you sure you want to deactivate this plan? All 
devices that are assigned this Plan will not have any 
plan assigned and hence Mobile Data Usage tracking will 
be stopped for these devices. 


Cancel Continue 


The status of the plan is now Inactive. MaaS360 will no longer track usage for any devices that were 
assigned to it. 

To reactivate a plan, perform the following steps: 

1 . On the Manage Plans screen, make sure all plans are visible. The Show Active and Inactive Plans 
toggle should say Hide Inactive. 


Manage Plans 





| Hdc Inactive | Create Kea Flee £3 

Plan flame 

v Default Status 

Available for 

First day of the Bll... Published Version 

Last WwWIW Date - 

Actions 

Hay Test 

Inadive 

Ertirc Account 

ID- 1 

D5fi9/2ai3 1B:03 UTC 

£ Action* T 

3G9- LATAR 

Funluhert 

Entire Account 

2 l 

QBfZI/inil 14 j 24 UTC 

* Action* ,r 

2GD LATAts 

PUble^ted 

Entire Account 

A 

OSf 17J2S13 12:37 UTC 

Ait i n n* * 


2. Click on the Actions pull-down menu for that plan, and then select Reactivate Plan. 


Actions 


/ Actions ’ 


!q Reactivate Plan 
[j^ View Audit History 


3. Specify if the plan should be the default plan, and enter a description. 


Publish Plan 


Set as default 

□ 

Enter a description to help with 
any future audits 

Add comments 

(Maximum of 255 characters) 



Continue 
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4. Click Continue. The Confirm Action message appears. 


Confirm Action 

X 

Are you sure you want to continue? 

Cancel 

Continue 


5. Click Continue. The plan has been reactivated. 

Viewing Audit History 

To see the changes that have been made to a plan, click View Audit History from the Actions menu for 
that plan. 



The Audit History screen displays changes for a plan, and when they were made. 


AutHl History Way Test 





i Pack to Hea-irlta C 

PubHsImrl [Jirtp 

ttnnt 

Pdtilislit'd Vsirskn - 

PdNklwwi By 

Cdmnems 


dS^ZS/jr,] 3 11:45 UTC 

PuWih 

2 

mdiT'_bb 

ReaiJtivatnn a plnr 

* 

UhS3 UTC 


1 

rpdTn_bh 

Tort Plan 

* 

« lit » 

H 4 Piaiii let i * 

HI Oapiiifing E - J H 1 ? 
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Reports 

MaaS360 Mobile Intelligence™ reports allows you to use enhanced reporting functions, such as the tabular 
presentation of reports to group associated graphs and reports, and to provide easy navigation between the 
reports. It also includes filters, which help you generate a variety of real-time reports or narrow down 
report details based on your filter criteria. 

To access the reports, mouse over the Reports tab and select the report family you want. 


REPORTS SETUP 


| Search 

MOBILE DEVICES 

PC INVENTORY 

PC SECURITY 

MDM Overview 

PC Overview 

Security 

Hardware Inventory 

Hardware Inventory 

Anti-Virus 

Network 

Network 

Personal Firewall 

BlackBerry Details 

Operating System 

Encryption 

Deployment Overview 

Software 

Backup & Recovery 

MOBILE APPS 

Windows 7 & 8 Readiness 

Patches 

Apps Installed 

COMMUNITY ANALYTICS 

Windows App Updates 

MOBILE SECURITY 

Mobile Metrics 


Security Overview 



Browser Violations 



MOBILE EXPENSE 



MANAGEMENT 



Data Usage Overview 



Data Usage Analysis 




Note: The reports that appear on the Reports tab depend on the products you have purchased. The 
list you see may be different than what is shown in this document. 

Separate reports in each family appear on tabs. 



There are filters at the screen to help you manage your data: 
• Personal 
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• Corporate owned 

• Unspecified 

• iOS 

• Android 

• BlackBerry 

• Windows Phone 

• Time period 


You can save your filter so you can use it again. Click Save as Custom, and then enter a name and 
description for it. 


Note: The filter you select for one report in a family is retained for the other reports until you 
clear it by clicking Clear on the pull-down menu. 


You can subscribe to reports by clicking 



Details Report 


Save as Custom ... 
Clear 




Last 7 Davs 
Last 30 Davs 



Last 90 Davs 
Last im Pays 


Save Filters 


Name 


Description 


|Max 255 characters 


[ Cancel ] [ Ok 1 



Last 7 Davs 
Last 30 Davs 



Current & Last M... 


35 


Last 90 Davs 
Last 180 Davs 
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You can specify the graphs and reports included in the subscription, the format (PDF or PPT), the email 
recipients, the delivery frequency and more. 

You can mouse over part of a graph to see the details about it. For example, the following shows that out 
of the 7 Android devices, 3 are tablets: 


Android 



7 


If you click on it, MaaS360 displays the Details Report filtered to show information about those tablets: 



The active filters are highlighted (yellow) for the associated columns. 

You can choose the type of chart by selecting it from the menu at the bottom of the page. 



You can also download the report by clicking Export. 
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Platform Administration 

Important administration tasks appear under the Portal Administration section of the Setup menu. 

SETUP 

SERVICES & SETTINGS 

Services 

Enrollment Settings 

-£ 

Login Settings 

ENTERPRISE INTEGRATION 

Cloud Extender 
Cloud Extender Settings 

PORTAL ADMINISTRATION 

Administrators 

Roles 

Administrator Logins Report 

Administrators 


To find or create a portal administrator, select Setup > Administrators. 
The Search Administrators screen appears. 



• Username 

• Email address 


• Select a role from the pull-down menu 
Click Search. 

If you do not enter any of the criteria, all administrators will be displayed. 
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The Actions icons apply to the administrator. 


H 

Edit the administrator’s information or roles. 

uS 

Reset the administrator’s password. 


Deactivate the administrator. 

X 

Delete the administrator. 

* 

View the change history for the administrator. 


Create Portal Administrator 


To create a new portal administrator: 

Click Add Administrator at the top of the screen. The Administrator Details screen appears. 



Enter the administrator’s email address and username. If the username will be the same as the email 
address, click the same as Corporate Email Address checkbox. 

Click Next. 
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Assign Roles 


r Linst portal admirvstrator access to specified Manaoed User Croups 


App Management 
Content Hanaper Tetf 
GZ R*S4 (W 
□k Management 


Adnrn-U^’iTin aiups nrly 

Ad>r»rvstrator 

- L«v«a 3 


I 



Role" ODcHprntOS 


Ow MmiruitfiSw 
Help Desk 


Hebdwk bngmeer 


IT AjA^niit/htor 
Master Adminst-abar 
McDd Tert 
ggs-CjaiaMti 


This- is a star-dand rcle that enables anson-sted user- mth csapability tp view Irvclces and 


Rale □■iCriptrcn 


Click to select one or more roles to assign to the new user. When you click to select a role, the role 
description appears in the Role Description field. 

Note: A /VI aaS360 Portal Administrator can create Administrator accounts only with equal or lesser 
access rights. For example, an administrator who is assigned the Help Desk role can only 
create Help Desk accounts, but will be unable to create an account with more access rights 
(such as the Administrator). 


Click the arrow buttons to move selected options or all options between the fields. 


!► 

Assign all the roles to the new administrator. 

► 

Assign the highlighted role to the new administrator. 

< 

Remove the highlighted role from the assignment. 

◄1 

Remove all roles from the assignment. 


Click Limit portal administrator access to the specified Managed User Groups if you do not want the user 
to have access to any other areas in MaaS360. Note: This is part of Departmentalization, a separate 
feature. For details, contact your account representative. 

Click Next. The Review Details screen is displayed. 


Review Details 


Uscjiiafrla Lcstl 2 £-fife«rfrnk. cam 


Etna* Address tvstl Z^fitwtnk, cwji 


-"■""‘"■'■M iSKEEET 


2- Finance Myr&^er 


Click Save. You will be asked for your password 
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Enter your password and click Continue. 


Administrator 

Portat AdmintstiratKK account - testlZArflfeei-ilnk.tom ■ has been successfully created. 

an email has been sent to the registered email address v^ith- the account detafs and Eemewaffy credentials to 109 mto the portal. 

OretftE Anad«r AdmirtiStrabar 


You will receive a confirmation message. You can now click Create Another Administrator to perform the 
process again. 

Roles and Rights 

There are a number of roles in MaaS360: 

• Read-Only: The Read-Only role provides view-only access to all devices, policies, and applications. 
The Read-Only role also allows the administrator to view reports, My Alert Center, devices, 
policies, and the Action History report in the MaaS360 System. 

• Help Desk: The Help Desk role provides the administrator with access rights to perform Help Desk 
device management actions that include locating an end-user device, sending messages or alerts to 
the end-user device, lock a device, or reset device passcode. The Help Desk role also allows the 
administrator to view My Alert Center, view policies and reports, manage device enrollments, edit 
device views, perform remote control and help desk actions. 

• Administrator: In addition to the access rights of the Read-Only role, the Administrator role 
provides access rights to perform device management actions on end-user devices. The 
Administrator role allows you to view My Alert Center, view reports and policies and also manage 
device enrollments, edit device view, perform policy actions, perform remote control, wipe data 
on a mobile device, send messages to end-user devices and perform device deactivation actions. 

• Administrator Level 2: The Administrator Level 2 role provides the Administrator with complete 
device management access rights that include the ability to create and manage policies and 
applications, The Administrator Level 2 role also allows you to view reports, and My Alert Center, 
manage device enrollments, perform device view bulk updates, define custom attributes, manage 
MaaS360 Cloud Extenders, perform group level actions, and view and publish policies in MaaS360 
system. 

• MaaS360 Service Administrator: The MaaS360 Service Administrator role provides the 
administrator with Master Administrator level access rights that include the ability to configure 
services and manage administrator accounts. The MaaS360 Service Administrator role also allows 
the administrator to view reports and Alert Center notifications, manage device enrollments, 
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perform device view bulk updates, define Custom Attributes, manage MaaS360 Cloud Extenders, 
perform group level actions, publish policies, and Configure Services. 


Role 

Right to Access 

Category 

Administrator 

Apps - Read only 

App Distribution 


Action History 

Device Management 


Buzz Device 

Device Management 


Change Compliance 
Rule Set 

Device Management 


Change Device Policy 

Device Management 


Change Expense Mgmt 
Plan 

Device Management 


Deactivate Device 

Device Management 


Device Enrollments - 
Read only 

Device Management 


Device View - Read 
only 

Device Management 


Distribute App for a 
device 

Device Management 


Distribute Doc for a 
device 

Device Management 


Enable Alerts 

Device Management 


Locate Device 

Device Management 


Lock Device 

Device Management 


Manage Device 
Enrollments 

Device Management 


Merge Duplicate 
Device Records 

Device Management 


Refresh Device 
Information 

Device Management 


Reset Device Passcode 

Device Management 


Selective Wipe 

Device Management 


Send Message 

Device Management 


Set Custom Attribute 
Value 

Device Management 


User Views - Generate 
Password 

Device Management 


Users - Read only 

Device Management 


View Custom 
Attributes 

Device Management 


Wipe Device 

Device Management 


Docs - Read only 

Doc Distribution 


Manage Document 
Settings 

Doc Distribution 


Expense Mgmt Plans - 
Read only 

Expense 

Management 


Description 

View only access to Apps. 

Ability to view a global action history across all devices. 

Ability to buzz a device through a Device View action. 

Ability to change a compliance rule set through a Device View 
action. 

Ability to change a device policy through a Device View action. 

Ability to change a mobile expense management plan through a 
Device View action. 

Ability to remove MDM control or hide devices through a Device 
View action. 

View only access to device enrollment requests. 

View only access to Device View (no actions). 

Ability to distribute an app through a Device View action. 

Ability to distribute a doc through a Device View action. 

Enable Alerts for Enterprise Customers. 

Ability to locate a device through a Device View action. 

Ability to lock a device through a Device View action. 

Ability to manage device enrollment requests. 

Ability to manually merge Android or Windows Phone 7 device 
records if automated merge cannot identify the devices to 
merge. 

Ability to issue an on -demand refresh for all information about 
the device through a Device View action. 

Ability to reset the device passcode through a Device View 
action. 

Ability to selectively wipe (restrict) corporate data from a 
device and revoke the selective wipe from a device through a 
Device View action. 

Ability to send a message to a device through a Device View 
action. 

Ability to set custom attribute values through a Device View 
action. 

Ability to generate passwords for users through the View All 
Users workflow. 

View only access to User View. 

View only access to custom attributes. 

Ability to wipe the device or canceling pending wipe action 
though a Device View action. 

View only access to Docs. 

Ability to modify Document settings 

View only access to Expense Mgmt Plans. 
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Role 


Administrator - 
Level 2 


Right to Access 

Mobile Metrics - View 
and Propose new 
ideas 

Manage Policies - 
Read only 


Category 

Mobile Analytics 
Policy Management 


Description 

View only access to Mobile Metrics graphs and ability to propose 
new ideas. 

View only access to Policies. 


Reports 


Reports 


Ability to view graphs and reports in the Reports tab 


Manage Apps 


App Distribution Ability to add, change or delete Apps. 


Action History 

Device Management 

Ability 

Bulk Upload Custom 
Attributes 

Device Management 

Ability 

Buzz Device 

Device Management 

Ability 

Change Compliance 
Rule Set 

Device Management 

Ability 

action. 


to view a global action history across all devices. 

to bulk upload a file to set custom attributes. 

to buzz a device through a Device View action, 
to change a compliance rule set through a Device View 


Change Device Policy 


Device Management Ability to change a device policy through a Device View action. 


Change Expense Mgmt 
Plan 

Deactivate Device 

Device Enrollments - 
Read only 

Device Group actions 

Device View - Read 
only 

Distribute App for a 
device 

Distribute Doc for a 
device 

Enable Alerts 


Device Management 
Device Management 

Device Management 
Device Management 
Device Management 

Device Management 

Device Management 
Device Management 


Ability to change a mobile expense management plan through a 
Device View action. 

Ability to remove MDM control or hide devices through a Device 
View action. 

View only access to device enrollment requests. 

Ability to push actions at a group level. 

View only access to Device View (no actions). 

Ability to distribute an app through a Device View action. 

Ability to distribute a doc through a Device View action. 

Enable Alerts for Enterprise Customers. 


Locate Device 


Device Management Ability to locate a device through a Device View action. 


Lock Device 

Manage Cloud 
Extenders 
Manage Custom 
Attributes 
Manage Device 
Enrollments 

Merge Duplicate 
Device Records 

Refresh Device 
Information 

Remove App 
Reset Device Passcode 


Selective Wipe 

Send Message 

Set Custom Attribute 
Value 


Device Management 
Device Management 

Device Management 
Device Management 

Device Management 

Device Management 
Device Management 
Device Management 

Device Management 

Device Management 
Device Management 


Ability to lock a device through a Device View action. 

Ability to manage Cloud Extenders. 

Ability to add, change or delete Custom Attributes. 

Ability to manage device enrollment requests. 

Ability to manually merge Android or Windows Phone 7 device 
records if automated merge cannot identify the devices to 
merge. 

Ability to issue an on -demand refresh for all information about 
the device through a Device View action. 

Ability to remove an app through a Device View action. 

Ability to reset the device passcode through a Device View 
action. 

Ability to selectively wipe (restrict) corporate data from a 
device and revoke the selective wipe from a device through a 
Device View action. 

Ability to send a message to a device through a Device View 
action. 

Ability to set custom attribute values through a Device View 
action. 


95 


MaaS360' 

by Fiberlink, an IBM company 

Role 


Help Desk 


Right to Access 

User Views - Generate 
Password 

Users - Read only 
Wipe Device 

Manage Docs 

Manage Document 
Settings 

Manage Expense Mgmt 
Plans 

Mobile Metrics - View 
and Propose new 
ideas 

Manage Policies 
Reports 

Apps - Read only 
Action History 
Buzz Device 

Device Enrollments - 
Read only 
Device View - Read 
only 

Enable Alerts 

Locate Device 

Lock Device 

Manage Device 
Enrollments 

Merge Duplicate 
Device Records 

Refresh Device 
Information 

Reset Device Passcode 

Send Message 

Set Custom Attribute 
Value 

User Views - Generate 
Password 

Users - Read only 

Docs - Read only 

Manage Document 
Settings 

Expense Mgmt Plans - 
Read only 

Mobile Metrics - View 
and Propose new 
ideas 

Manage Policies - 
Read only 

Reports 


Category 

Device Management 

Device Management 

Device Management 

Doc Distribution 

Doc Distribution 

Expense 

Management 

Mobile Analytics 

Policy Management 
Reports 

App Distribution 
Device Management 
Device Management 

Device Management 

Device Management 

Device Management 
Device Management 
Device Management 

Device Management 

Device Management 

Device Management 
Device Management 
Device Management 
Device Management 
Device Management 

Device Management 
Doc Distribution 

Doc Distribution 

Expense 

Management 

Mobile Analytics 

Policy Management 
Reports 


Description 

Ability to generate passwords for users through the View All 
Users workflow. 

View only access to User View. 

Ability to wipe the device or canceling pending wipe action 
though a Device View action. 

Ability to add, change or delete Docs. 

Ability to modify Document settings 

Ability to add, change or delete expense mgmt plans. 

View only access to Mobile Metrics graphs and ability to propose 
new ideas. 

Ability to add, change, delete and publish policies. 

Ability to view graphs and reports in the Reports tab 


View only access to Apps. 

Ability to view a global action history across all devices. 

Ability to buzz a device through a Device View action. 

View only access to device enrollment requests. 

View only access to Device View (no actions). 

Enable Alerts for Enterprise Customers. 

Ability to locate a device through a Device View action. 

Ability to lock a device through a Device View action. 

Ability to manage device enrollment requests. 

Ability to manually merge Android or Windows Phone 7 device 
records if automated merge cannot identify the devices to 
merge. 

Ability to issue an on -demand refresh for all information about 
the device through a Device View action. 

Ability to reset the device passcode through a Device View 
action. 

Ability to send a message to a device through a Device View 
action. 

Ability to set custom attribute values through a Device View 
action. 

Ability to generate passwords for users through the View All 
Users workflow. 

View only access to User View. 

View only access to Docs. 

Ability to modify Document settings 

View only access to Expense Mgmt Plans. 

View only access to Mobile Metrics graphs and ability to propose 
new ideas. 

View only access to Policies. 

Ability to view graphs and reports in the Reports tab. 
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Role 


Read Only 


Service 

Administrator 


Right to Access 

Apps - Read only 
Action History 

Device Enrollments - 
Read only 
Device View - Read 
only 

Enable Alerts 

Refresh Device 
Information 

Users - Read only 

Docs - Read only 

Manage Document 
Settings 

Expense Mgmt Plans - 
Read only 

Mobile Metrics - Read 
only 

Manage Policies - 
Read only 

Reports 


Manage Administrator 
Roles 

Manage Apps 

Bulk Upload Custom 
Attributes 

Buzz Device 

Change Compliance 
Rule Set 

Change Device Policy 

Change Expense Mgmt 
Plan 

Deactivate Device 

Device Enrollments - 
Read only 

Device Group actions 

Device View - Read 
only 

Distribute App for a 
device 

Distribute Doc for a 
device 

Enable Alerts 
Locate Device 
Lock Device 

Manage Cloud 
Extenders 
Manage Custom 
Attributes 


Category 

App Distribution 
Device Management 
Device Management 

Device Management 
Device Management 
Device Management 

Device Management 
Doc Distribution 

Doc Distribution 

Expense 

Management 

Mobile Analytics 

Policy Management 
Reports 

Administrator 

Management 

App Distribution 

Device Management 

Device Management 

Device Management 

Device Management 
Device Management 
Device Management 

Device Management 
Device Management 
Device Management 

Device Management 
Device Management 

Device Management 
Device Management 
Device Management 

Device Management 
Device Management 


Description 

View only access to Apps. 

Ability to view a global action history across all devices. 

View only access to device enrollment requests. 

View only access to Device View (no actions). 

Enable Alerts for Enterprise Customers. 

Ability to issue an on -demand refresh for all information about 
the device through a Device View action. 

View only access to User View. 

View only access to Docs. 

Ability to modify Document settings. 

View only access to Expense Mgmt Plans. 

View only access to view Mobile Metrics graphs. 

View only access to Policies. 

Ability to view graphs and reports in the Reports tab. 

Ability to create & manage Roles. Additionally, ability to create 
& manage admins. 

Ability to add, change or delete Apps. 

Ability to bulk upload a file to set custom attributes. 

Ability to buzz a device through a Device View action. 

Ability to change a compliance rule set through a Device View 
action. 

Ability to change a device policy through a Device View action. 

Ability to change a mobile expense management plan through a 
Device View action. 

Ability to remove MDM control or hide devices through a Device 
View action. 

View only access to device enrollment requests. 

Ability to push actions at a group level. 

View only access to Device View (no actions). 

Ability to distribute an app through a Device View action. 

Ability to distribute a doc through a Device View action. 

Enable Alerts for Enterprise Customers. 

Ability to locate a device through a Device View action. 

Ability to lock a device through a Device View action. 

Ability to manage Cloud Extenders. 

Ability to add, change or delete Custom Attributes. 
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Role 


Right to Access 

Manage Device 
Enrollments 

Manage Users 

Merge Duplicate 
Device Records 

Refresh Device 
Information 

Remove App 
Reset Device Passcode 

Selective Wipe 

Send Message 

Set Custom Attribute 
Value 

User Views - Generate 
Password 

Users - Read only 
Wipe Device 

Manage Docs 

Manage Document 
Settings 

Manage Sharepoint 
Settings 

Manage Policies 
Reports 

Convert to Customer 
Expire Account 
Extend Trial 
Read-Only Account 
Services Configuration 


Category 

Device Management 
Device Management 

Device Management 

Device Management 
Device Management 
Device Management 

Device Management 

Device Management 
Device Management 

Device Management 
Device Management 
Device Management 
Doc Distribution 
Doc Distribution 

Doc Distribution 

Policy Management 
Reports 

Service 

Configuration 

Service 

Configuration 

Service 

Configuration 

Service 

Configuration 

Service 

Configuration 


Description 

Ability to manage device enrollment requests. 

Ability to manage users. 

Ability to manually merge Android or Windows Phone 7 device 
records if automated merge cannot identify the devices to 
merge. 

Ability to issue an on -demand refresh for all information about 
the device through a Device View action. 

Ability to remove an app through a Device View action. 

Ability to reset the device passcode through a Device View 
action. 

Ability to selectively wipe (restrict) corporate data from a 
device and revoke the selective wipe from a device through a 
Device View action. 

Ability to send a message to a device through a Device View 
action. 

Ability to set custom attribute values through a Device View 
action. 

Ability to generate passwords for users through the View All 
Users workflow. 

View only access to User View. 

Ability to wipe the device or canceling pending wipe action 
though a Device View action. 

Ability to add, change or delete Docs. 

Ability to modify Document settings. 

Ability to modify Sharepoint settings. 

Ability to add, change, delete and publish policies. 

Ability to view graphs and reports in the Reports tab. 

Restrict the visibility of account as Convert to Customer. 
Restrict the visibility of account as Expire Account. 

Restrict the visibility of account as Extend Trial. 

Restrict the visibility of account as Read-Only Account. 

Ability to enable additional services through checklist workflow. 


Creating a Role 

Administrators can create roles, but only with the access privileges they possess (or with fewer privileges). 
To create a role, mouse over Setup and select Roles. 
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SETUP 

SERVICES & SETTINGS 

Services 

Enrollment Settings 
Login Settings 

ENTERPRISE INTEGRATION 

Cloud Extender 
Cloud Extender Settings 

PORTAL ADMINISTRATION 

Administrators 


Administrator Logins Report 


Click Add Role. 

Mmiiigc Role 

Add 




Pole- | ---Setedt— [SfcJ 






Enter the role’s name and a description. You can either create a new role or copy an existing one to use as 
a model. 



Creating a Role Based on an Existing Role 

If you want to use an existing one, select it from the pull-down menu and then click Next. 

1, S«lec1 Made dF C-realion 

““ F "I 


The access rights for that role are already selected. You can make your changes, and then click Save. 
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Creating a New Role Without Using a Model 

If you choose not to use an existing role as a model, select Create new and then click Next. 


1. Select Hade of Creation 

h-skct From E-xi»br>j ■ 
Cnpjfsj rtitv V 


33 


On the Grant Access Rights screen none of the access rights will be selected. 



Managing Roles 

To change, delete or view a history of changes that were made to a custom role, mouse over Setup and 
select Roles. 
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SETUP 


SERVICES & SETTINGS 


Services 

Enrollment Settings 
Login Settings 

ENTERPRISE INTEGRATION 

Cloud Extender 
Cloud Extender Settings 

PORTAL ADMINISTRATION 

Administrators 


Roles 


Administrator Logins Report 


Select the role from the pull-down list on the Manage Role screen. 


Manage Role 


Add Role 

Select an e^bstkiq Rale from Hie llrt for AiW a ne Role ) le c 




Solo* i — Select— 






-j pjsssEwj nmm 



It will automatically be populated with the description. 



Click Delete to delete the role. 

Click Change History to see a list of the changes made to the role. 


View Change Misloryttest) 

Action Datei In GMT] 

A cl loo Performed 

Performed By 

Source IP Addreos 


Oa.'OE.'1 3L2 02:31 AM 

Modify 

admin4f1berlink.com 

317.0.34 

Vic.n Charvacs 

tre.'DlVKllZ 02:2 1 AM 

«odify 

ad m i n be r bn k. ce m 

E3L.0J.1 

Vie* Chimpes 

M/OS/Mli 03:31 API 

Hodify 

odmin4flber|!jik,cdm 

W,Ml 

VitP C^raca 

09/08/2012 01:31 AH 

WadiFy 

ad m i it**! bar ki b,CdM 

317.0, Al 

View Chanofea 

02:31 AM 

Modify 

admih4fibeilmkcanri 

3*7,0.34 

VHtw Chtisatt 

os/oa^ais 02:30 AM 

HddiFy 

adminarlberlinkLcam 

317.0.0.1 

View Changes 

oar'oa/aaiz 02:30 am 

Modify 

ad m i n 4fi berl in k. co m 

317.0.14 

Vie* ChanoEj 

oavon^li 02:53 AM 

htedify 

admin^Wberlmk cam 

517,0.8.1 

Vie* thar,3Ea 

Q9.'0a/2S12 02 :» AM 

MadiFy 

Bdmih*#il»T|iAk-eDrri 

317,0,0.1 

view Charged 

W/W/WIS 02:33 AM 

Modify 

ad m ! n £<i be r 1 in k_ ce m 

3 £7.0.0. J 

Vif* 

03^03/2312 02:21 AM 

Modify 

admin4fiberlmk.com 

317.3.3,1 

VlOn ChacflM 


Click the View Changes link for one of the dates to see details. 
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View Changes 

p|| Legend: Mt Modified Fields MU New value IS o f \s *-s l - ‘/a^ue 

Role Name test 
RoEe Description test 
Access Rights Action History 
Approve Device 
Billing Reports 
Block Device 

Bulk Upload Custom Attributes 
Change Compliance Rute Set 
Change Device Policy 
Change Expense Mgmt Plan 
Deactivate Device 
Device Enrollments - Read only 


If you want to edit a role, click the Edit button on the Manage Role screen. 




Administrator Logins Report 

Mouse over Setup and click Administrator Logins Report. 

The Search Criteria screen appears. 

Search Criteria 

Username Authentication Status -select- - ▼ 

IP Address | | 

Login Date Pf- ( 3 

Search 


Enter a username, IP address, login date range or authentication status. If you do not enter any criteria, 
the logins will be listed. 

Click Search. 
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Appendix A: Features List 

Device Support 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Android 2.2+ 

f 

f 


Android 3.x 

/ 

/ 


Android 4.x 

f 

/ 


BlackBerry OS 4 

f 


f 

BlackBerry OS 5 

f 


f 

BlackBerry OS 6 

f 


f 

BlackBerry OS 7 

I 


/ 

BlackBerry OS 10 

f 


f 

iOS 4.x (iPhone, 
iPad, and iPod 
Touch) 

f 

/ 


iOS 5.x (iPhone, 
iPad, and iPod 
Touch) 

/ 

/ 


iOS 6.x (iPhone, 
iPad, and iPod 
Touch) 

f 

f 


iOS 7 (iPhone, 
iPad, and iPod 
Touch) 

f 

f 


iOS V3.x (iPhone, 
iPad, and iPod 
Touch) 

/ 




iOS 

Android 

Kindle 

Fire 

Win Phone 
7.5 

Win Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



f 

f 







/ 








f 

f 














































/ 








/ 








f 








f 







Day 0 
support on 
GA of iOS 7 










MaaS360* 

by Fi herlink, an IBM company 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Mac OS X Tiger, 
Lion, Mountain 
Lion 




QNX 

f 



Symbian (Nokia) 

/ 

/ 


WebOS 

/ 



Windows Mobile 
6.1 

/ 

/ 


Windows Mobile 
6.5 

/ 

/ 


Windows Phone 7 

/ 



Window Phone 
7.5 (Mango) 

/ 



Windows Phone 8 

f 



Windows XP, 
Vista, 7 




Windows 8 

/ 




iOS 

Android 

Kindle 

Fire 

Win Phone 
7.5 

Win Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








f 





















































/ 









/ 









f 








/ 




Activation and Enrollment 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

AD Authenticated 
Enrollment 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

f 

/ 

f 

f 

/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Agent based 




Bulk enrollment 



/ 

Certificate based 




Enrolled when 
Exchange Email is 
configured on Device 

/ 

f 


Push MDM Profiles 
OTA 




Unattended 
Enrollment workflow 



/ 

Web Based Enrollment 
(no app required) 



f 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

/ 

/ 


/ 



/ 

/ 

/ 

/ 

/ 

/ 



f 
















/ 




/ 


/ 


f 

/ 

/ 

/ 

f 

/ 


*AD 

Required 

f 




f 





Device Attributes 

Hardware Attributes 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Activation Date 




ActiveSync Agent 

f 



ActiveSync Device ID 

/ 

/ 


ActiveSync GUID 

f 



ActiveSync Identity 

f 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

f 

f 

f 

f 















I 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

API Level 




Apple Serial Number 




Application Data 




Baseband Version 




Battery Condition 




Battery Level 



/ 

BES Server 



f 

BIOS Date 




BIOS Serial Number 




Build Number 




CD/DVD Name 




Default Language 

f 



Device Serial Number/PIN 



f 

Email Address 

/ 

/ 

/ 

File System Type 




Free External Storage 




Free Internal Storage 



/ 

IMEI/ESN 



f 

Installed/Activation Date 

/ 

/ 

I 

Kernel Version 




Last Reported 

f 

f 

f 

Managed Status 

/ 

/ 

/ 

Manufacturer 

f 

f 

f 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

/ 






/ 






/ 


/ 

f 

f 







f 

f 







f 

f 






/ 

f 

f 



















/ 








/ 



/ 

f 

f 











/ 











/ 

f 

f 




/ 


/ 

/ 

/ 

/ 


/ 








/ 

/ 



/ 

/ 






/ 

/ 

/ 




/ 


/ 

f 



/ 




/ 

/ 

/ 

/ 


/ 

/ 



/ 

f 






/ 

f 

f 

/ 


f 

/ 


/ 

/ 

/ 

/ 


/ 

/ 


/ 

f 

f 

/ 

/ 

/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Microsoft Auto-Update Status 




Model 

/ 

/ 

/ 

Model ID 




Modem Firmware Version 



f 

Motherboard Serial Number 




Number of Drives 




Number of Processor Cores 




Operating System 

/ 

/ 

I 

Operating System Version 



/ 

OS Architecture (32 vs. 64 
bit) 




OS Edition 




OS Patches (Security and 
Others 




Ownership 

f 

f 

/ 

Platform Version 




Processor Name 




Processor Name 




Processor Speed 




RAM 




Screen Language 



/ 

Screen Resolution 



/ 

Screen Width 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 







/ 



/ 

/ 

/ 

/ 

/ 

/ 

/ 


/ 



f 


f 

/ 


/ 



f 

/ 









f 








f 




/ 

f 






/ 

/ 

/ 

I 

/ 

I 

/ 


/ 

/ 

/ 

I 

/ 

I 

/ 







f 

/ 







I 

/ 







I 

/ 


/ 

f 

f 

f 

/ 

f 

/ 








/ 



f 

f 




/ 







f 

/ 



I 

/ 




/ 



f 

f 

f 


f 

/ 



/ 

I 

I 

/ 

I 




/ 

/ 

I 

/ 





/ 

f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Secure Browser Policy 




Secured Boot ROM 



/ 

Service Pack 




Timezone 




Total External Storage 




Total Internal Storage 



/ 

UDID 




Username 

/ 

/ 

/ 

Volume Free Space 




Volume Label 




Volume Name 




Volume Size 




WMI Status 





Network Attributes 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Adapter ID 




Adapter Type 




BlackBerry Internet Service 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 














/ 







/ 

/ 



/ 

f 



f 

/ 



/ 

f 



f 



/ 

f 

f 




/ 


/ 




f 


/ 


/ 

/ 

/ 

/ 


/ 

/ 







/ 

/ 







f 

/ 







I 

/ 







f 

/ 







f 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 







/ 








/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

(BIS) Enabled 




Bluetooth Mac Address 




Carrier (Current) 



/ 

Carrier (Home) 



/ 

Carrier Setting Version 




Country (Current) 




Country (Home) 




Device Driver Date 




Device Driver Name 




Device Driver Version 




DHCP Enabled 




Direct Connect ID 



f 

DNS Servers 




Gateway 




GPS Settings Enabled 




ICCID/IMSI 



f 

International Data Roaming 




IP Address 




Last Connection Date - Wi-Fi 




Network Type (Current) 



/ 

Phone Number 



/ 

Roaming 




SSID 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 










/ 

f 







/ 

/ 


/ 

/ 




f 

/ 







/ 








/ 

/ 







/ 

/ 












/ 








/ 








/ 








/ 

/ 















/ 

/ 







/ 

/ 



/ 







/ 

f 







/ 

f 







/ 

/ 

/ 



/ 



/ 

/ 

f 







/ 


/ 


/ 



/ 

/ 







/ 

/ 







/ 

/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Subnet Mask 




Supported Frequencies 



/ 

Wi-Fi Mac Address 




Personal Hotspot 




Do Not Disturb 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 







/ 

I 










/ 

/ 

f 


/ 

f 

f 


/ 







iOS 7 onwards 

/ 







iOS 7 onwards 
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Location Attributes 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Accuracy 




Checked in Location 




Checked in status 




Latitude 




Location (Address) 




Location History 




Longitude 




Timestamp of Location 
Detection 




Find My Device 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

f 


/ 

/ 


/ 


f 

f 







f 

f 







f 

f 


f 

/ 


/ 


/ 

/ 


I 

/ 


/ 


/ 






/ 


/ 

f 


f 

/ 


/ 


/ 

I 


I 

/ 


/ 


/ 







iOS 7 onwards 
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Application Inventory 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Application Bundle Size 




Application Dynamic Size 




Application ID 




Application Install Location 




Application Name 



/ 

Application Source 




Application Vendor 




Application Version 



/ 

Installation Date 




Provisioning Profile Expiry 
Date 




Provisioning Profile ID 




Provisioning Profile Name 




iTunes Account Present 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

/ 

f 


f 




f 

/ 

f 


f 




f 

f 

f 


f 





f 

f 






I 

/ 

I 


I 

/ 

/ 


/ 




/ 

/ 







/ 

/ 



/ 

/ 

I 


/ 

/ 

/ 






f 

/ 



/ 








/ 








f 








f 







iOS 7 onwards 
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Security and Compliance 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

ActiveSync Policy 

f 



Allow installation of Non- 
Market Apps 




Allow Mock Locations 




Anti-Spyware Details 




Anti-Virus Details 




App Compliance State 




Auto-Backup Configured 



/ 

Auto-Backup Exclusions 



f 

Auto-Backup Frequency 



/ 

Auto-Sync Enabled 




Automatic Data Backup to 
Google Servers Enabled 




Automatic Restore from Data 
Backup on Application 
Reinstall 




Background Data Sync 
Enabled 




Backup and Recovery 




Bluetooth Enabled 




Camera Present 





Android 

Kindle 

Win 

Win 

Windows 


Fire 

Phone 

7.5 

Phone 

8 

Laptops 


Mac 


Comments 


Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Certificates 




Configuration Profile Name 




Configurator Supervised Mode 




Data Encryption 




Data Leak Protection 




Device Passcode Status 

f 

f 

/ 

Device Rooted 




Device Wiped 




Failed Settings 




GPS Present 




Hardware Encryption 



/ 

Jailbreak Detection 




Last MDM Policy Update Date 




Last MDM Policy Update 
Source 




Last Policy Updated Date 

/ 



Last Selective Wipe Date 




Last Successful Backup Time 



f 

Last Wipe Applied Date 

/ 

/ 


Mailbox Approval State 

f 

f 


Master Key Vulnerability 
status 




Maximum Failed Password 
Attempts 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








/ 








/ 













/ 

/ 







/ 



/ 

f 

f 


/ 





f 

f 






/ 

/ 

/ 




/ 


/ 









/ 







/ 

/ 



/ 




/ 








/ 

/ 

f 


f 


/ 


/ 

/ 

/ 






/ 

/ 

/ 




/ 


/ 

/ 

f 




/ 








/ 


/ 

/ 

/ 


/ 


/ 


/ 









/ 

/ 






/ 

/ 

f 




/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Maximum Passcode Age 
(days) 




Maximum Time to Lock (min) 




MDM or BES Policy 



/ 

Minimum Passcode Length 




NFC enabled 




Number of Special Characters 




Other Device Administration 
Solutions 




Out-of-Compliance Reasons 




Passcode History 




Passcode Quality 




Peripheral Protection 




Personal Firewall Details 




Policy Compliance State 



f 

Policy Version 




Remote Wipe Support 

f 

f 


Restrictions Applied 




Rule Compliance State 




Rule Set Configured 




Secure Browser - Last Policy 
Update 




Secure Browser Policy 




Selective Wipe 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

/ 






/ 

/ 

f 




/ 


/ 

/ 

I 


/ 


/ 


f 

/ 

/ 




/ 



/ 







/ 

/ 

f 




/ 



/ 

/ 






/ 

/ 

f 


f 





/ 

f 






/ 

f 

f 




/ 







/ 

/ 







/ 

/ 


/ 

f 

f 






/ 

I 

/ 




/ 


/ 






/ 


/ 

f 

f 




/ 


f 

I 

/ 






f 

f 

f 






I 

/ 

/ 






f 

/ 

f 






f 

/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Settings configured 




Settings Failed to Configure 




Visible Passwords 





Running Services 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

App ID 




Application Name 




Memory Used 




Running Time 




Service Name 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

/ 






/ 

/ 

/ 







f 

f 







iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

f 







/ 

/ 



/ 




/ 

/ 







/ 

/ 







/ 

f 



f 
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MaaS360 Services 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Advanced Device 
Management SDKs Enabled 




App ID 




Application Name 




BlackBerry Push Notification 
Registration Status 




BlackBerry Push Notification 
Status 




Company Hub 




DTM Real-time Notification 




Google Real-time Notification 
Registered 




Installed Date 




Installed Services 




List of Modules with versions 
and activation time 




MaaS360 Agent Version 
(Current) 




MaaS360 Agent Version 
(Initial) 




MaaS360 Device ID 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



f 







f 

I 

/ 






/ 

f 

/ 



/ 























/ 









/ 




f 








/ 

/ 

/ 

/ 

/ 



/ 













/ 



f 

/ 

/ 

/ 

/ 

/ 

/ 










f 

/ 

f 

f 

f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Microsoft Device Info 
Collection 




Microsoft Location Services 




Microsoft Push Notifications 




Primary Google Account 





Mobile Data Usage 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Daily Mobile Data Usage 
(Current Period) 




First day of the Billing cycle 




Monthly aggregate Mobile 
Data Usage 




Plan Name 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 





/ 

/ 







/ 

/ 







/ 

/ 





/ 








iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

f 







/ 

/ 







/ 

/ 







/ 

/ 
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Browser History (Visited) 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Allowed Via Exception 




Domain 




First Visit 




Last Visit 




Number of Visits 




Policy Name 




URL Category 




Username 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

/ 







f 

/ 







f 

f 







f 

f 







/ 

I 







/ 

/ 







/ 

f 







/ 

I 
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Browser History (Blocked) 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Access Time 




Embedded in Page 




Policy Name 




URL 




URL Category 




Username 





BES (BlackBerry) Device Features 
Device Capabilities 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Application Control Policies 



f 

Large Attachment Upload 



f 

Organizer Data Sync 
Encodings 



/ 

Wireless Application Delivery 



/ 

Wireless PIM Data Sync 



f 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

/ 







f 

/ 







f 

f 







f 

f 







/ 

/ 







/ 

/ 








iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Email Capabilities 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Address Lookup Encodings 



f 

Calendar Encodings 



f 

Message Encodings 



f 

PGP 



f 

S/MIME Encrypted Msg 



/ 

Sent Items Sync 



/ 


Messaging History 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Last Contact 



f 

Last Time Msg Receive 



/ 

Last Time Msg Sent 



/ 

Result of Last Transaction 



f 

Uptime 



/ 



iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



















































iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Privacy Settings 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Restrict Location Information 




Restrict App Inventory 
Information 





Actions 

Device Actions 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Allow, Block Device for Email 
Access 

f 

/ 


Approve device for Email 
Access 

/ 



Change ActiveSync Policy 

/ 



Change BES Policy 



/ 

Change MDM Policy 




Change Rule Set 

/ 

/ 


Locate Device 




Buzz Device 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

f 



/ 


/ 


f 

f 





f 



iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptop 

Mac 

Comments 

Requires Native App on Device 


































/ 

f 

f 


f 


/ 


/ 

/ 

/ 


/ 




/ 

f 


f 

f 


/ 


f 

f 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Lock Device 




Lock Device- Display Message 
and Callback no. 




Policy Assignment to AD 
Groups 




Policy Assignment to Device 
Groups 




Refresh Device Information 



/ 

Remote Device Wipe (Full) 

/ 

/ 

/ 

Remote Device Wipe 
(Selective) 




Remove Device from BES 
Server 



/ 

Remove Device from 
Exchange Server 

f 

/ 


Remove MDM Control 




Reset Device Password 



/ 

Configure Patch Settings 




Send a Message 



/ 

Distribute App 




Change Ruleset 




Change Secure Browser 
Policy 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptop 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

/ 



/ 

/ 


/ 







iOS 7 onwards 

/ 

/ 

/ 


/ 


/ 


/ 

/ 

/ 


/ 


/ 


/ 

/ 

/ 

/ 

/ 


/ 


/ 

f 

/ 


f 

/ 

/ 


/ 

/ 

/ 


/ 




















/ 

f 

f 

/ 

f 

/ 

/ 


/ 

f 

f 











/ 



/ 

f 

f 

/ 

f 

/ 



/ 

/ 

/ 

/ 

f 

/ 

/ 


/ 

/ 

/ 

/ 

/ 

/ 



/ 

f 

f 
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Group Actions 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Hide Devices 




Send Message 




Change MDM Policy 




Change Plan 




Distribute App 




Distribute Doc 




Change Rule Set 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptop 

Mac 

Comments 

Requires Native App on Device 


/ 

f 

f 

f 

f 

/ 

/ 


/ 

f 

/ 






/ 

/ 

/ 


/ 




/ 

f 

f 






/ 

/ 

/ 


/ 

/ 



/ 

/ 

/ 






/ 

/ 

/ 


/ 

/ 




Policies 

ActiveSync Policies 




Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Allow access to Windows 
File Shares 

The device 
can access 
Windows File 
Shares 

/ 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 











125 


MaaS360* 

by Fi herlink, an IBM company 




Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Allow access to Windows 
SharePoint Services 

The device 
has access to 
Windows 
SharePoint 
Services 

/ 



Allow Attachments to be 
downloaded to the 
Mobile Device 

Attachments 
can be 
downloaded 
to the device 

/ 



Allow Bluetooth 

The user can 
use 

Bluetooth if 
the device 
supports it 

/ 



Allow Browser 

The user can 
use the 
device’s 
browser 

/ 



Allow Camera 

The user can 
use the 
device’s 
camera 

/ 



Allow Consumer Mail 

The device 
can receive 
personal 
emails 

/ 



Allow Desktop 
Synchronization 

The device 
can be 
synchronized 
with a 
desktop 

f 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Allow HTML formatted 
Email 

The device 
can receive 
HTML 
formatted 
emails 

/ 



Allow Infrared 
connections 

The device 
can make 
and receive 
infrared 
connections, 
if the device 
is equipped 
for it 

/ 



Allow Internet sharing 
from the Mobile Device 

The device 
can perform 
Internet 
sharing, if 
the device is 
equipped for 
it 

/ 



Allow Non-Provisionable 
devices 

Older devices 
that may not 
support all 
policy 

settings can 
still connect 
to the 
Exchange 
server 

/ 



Allow Remote Desktop 
from the Mobile Device 

The device 
can connect 
to a remote 
desktop 

/ 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Allow Removable Storage 
Card 

A removable 
storage card 
can be used 
with the 
device 

/ 



Allow Unsigned 
Applications 

Unsigned 
apps are 
permitted on 
the device 

/ 



Allow Unsigned 
Installation Packages 

Unsigned 
installation 
packages are 
permitted on 
the device 

/ 



Allow Wi-Fi 

The device 
can connect 
via Wi-Fi 

/ 



Enable Password 
Recovery 

The user can 
initiate 
password 
recovery for 
the device 

f 



Include past Calendar 
items 

The device 
can access 
old calendar 
items 

/ 



Include past Email items 

The device 
can access 
old emails 
items 

f 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Limit Email size to (KB) 

Specify the 
maximum 
size an email 
sent or 
received by 
the device 
can be. 
Longer 

messages will 
be 

truncated. 

/ 



Maximum Attachment 
size (KB) 

Specify the 
maximum 
size an 
attachment 
sent or 
received by 
the device 
can be 

/ 



Mobile Device Policy 
Refresh interval (hours) 

How often 
MaaS360 
checks to see 
if a new 
policy has 
been 

assigned to 
the device 

f 



Require Encryption on 
Storage Card 

If the device 
has a 

removable 
storage card, 
the data on 
in must be 
encrypted 

f 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Require Encryption on 
the Mobile Device 

The device 
must be 
encrypted 

/ 



Require Manual 
Synchronization while 
Roaming 

If the device 
is roaming, it 
can only by 
synched 
manually 

/ 




iOS Policies 




Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Passcode Restrictions 

Specify how 
passcodes are 
handled on 
the device 




Device Restrictions 
(MDM4 API) 





- Allow Adding Game 
Center Friends 

The device 
can be used to 
add Game 
Center Friends 




- Allow Automatic 
Synchronization While 
Roaming 

The device 
can be 

automatically 
synchronized 
while roaming 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



















iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 








I 








I 








I 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Explicit Music 
and Podcasts Purchased 
from iTunes 

Explicit music 
and podcasts 
can be 
purchased 
from iTunes 
from the 
device and 
stored on it 




- Allow In-App 
Purchase 

Purchases can 
be made from 
apps on the 
device 




- Allow Installing of 
Applications 

Apps can be 
installed on 
the device 




- Allow Multiplayer 
Gaming 

Multiplayer 
games can be 
played on the 
device 




- Allow Screen 
Capture 

Screen 
captures can 
be taken with 
the device 




- Allow Use of iTunes 
for Media Download 

iTunes can be 
used to 

download files 




- Allow Use of Camera 

Photographs 
can be taken 
with the 
device’s 
camera 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








/ 








/ 








/ 








f 








f 








f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Use of 
Facetime 

Facetime can 
be used 




- Allow Use of Safari 

The device 
can use the 
Safari browser 




-Safari : Enable 
Auto-fill 

When using 
Safari, fields 
in forms can 
be filled 
automatically 




-Safari : Force Fraud 
Warning 

Safari will 
attempt to 
prevent the 
user from 
viewing 
websites that 
are fraudulent 
or 

compromised 




-Safari : Enable 
JavaScript on websites 

JavaScript on 
websites will 
be enabled 
when browsing 




-Safari : Block 
Popups 

Popups will be 
blocked when 
browsing 




-Safari : Configure 
Cookie settings 

The user can 

configure 

cookie 

settings on the 
device 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








f 








/ 








/ 








/ 








/ 








/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Use of 
YouTube 

The user can 
access 
YouTube on 
the device 




- Allow Voice Dialing 

The user can 
use voice 
dialing on the 
device 




- Set Ratings for 
allowed Movies, TV 
Shows and Apps 

Only movies, 
TV shows and 
apps with the 
specified 
ratings can be 
accessed on 
the device 




Device Restrictions 
(MDM5 API) 





- Allow Siri 

Siri can be 
used on the 
device 




- Allow Siri while 
Locked 

Siri can be 
used when the 
device is 
locked and no 
passcode has 
been entered 




- Allow untrusted TLS 
Prompt 

The device 
will 

automatically 

reject 

untrusted 

HTTPS 

certificates 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








/ 








f 








f 







iOS 5+ Only 

f 







iOS 5+ Only 

/ 







iOS 5+ Only 

/ 







iOS 5+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Configure Roaming 
Settings (Data & Voice) 

Roaming 
settings can 
be configured 
by the user 




- Enforce iTunes 
Password Entry 

The iTunes 
password must 
be entered to 
download 




- iCloud - Allow Cloud 
Backup 

Data on the 
device can be 
backed up to 
iCloud 




- iCloud - Allow 
Documents Sync 

Documents 
can be synced 
to iCloud 




- iCloud - Allow Photo 
Stream Sync 

Photos can be 
synced to 
iCloud 




- iCloud - Allow 
Shared Photo Stream 

Photos can be 
shared via 
iCloud 




Open from Managed to 
Unmanaged apps 

Files from 
managed apps 
can be opened 
in unmanaged 
apps 




Open from Unmanaged 
to Managed Apps 

Files from 
unmanaged 
apps can be 
opened in 
unmanaged 
apps 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ Only 

/ 







iOS 5+ Only 

f 







iOS 5+ Only 

/ 







iOS 5+ Only 

f 







iOS 5+ Only 

/ 







iOS 6+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Allow Today View in 
Lock Screen 

The Today 
View can be 
seen on the 
device lock 
screen 




Limit Ad Tracking 

Ads the user 
sees will not 
be tracked 




Allow over-the-air PKI 
Updates 

Changes to 
the trusted 
root 

certificates 
list will be 
allowed 




Device Restrictions 
(M DM6 API) 





- Allow Passbook 
while Locked 

Passbook 
notifications 
will not be 
shown on the 
lock screen 




- Allow submission of 
Diagnostic Information 

Diagnostic 
information 
will be sent 
automatically 
to Apple 




- iCloud - Allow 
Shared Photo Stream 

Photos can be 
shared via 
iCloud 




App Compliance 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 6+ Only 

/ 







iOS 6+ Only 

/ 







iOS 6+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Configure Restricted 
Applications (App 
Blacklist) 

Specify which 
apps cannot 
be installed on 
the device 




- Configure Allowed 
Applications (App 
White list) 

Specify which 
apps are 
allowed on 
the device 




- Configure Required 
Applications 

Specify which 
apps are 
required on 
the device 




Wi-Fi Profiles 





- Control Auto Join 
Behavior 

Specify if the 
device will 
automatically 
join a Wi-Fi 
network 




- Proxy Settings 

Specify proxy 
information 
for the device 




- Connect Priority 

If multiple 
networks are 
available, the 
device will 
choose the 
network with 
the lowest 
priority. Zero 
is the default, 
and negative 
numbers are 
allowed 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








/ 








f 








I 








/ 







iOS 5+ Only 

/ 







iOS 5+ Only 

f 







iOS 7+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

AirPrint 





- Configure AirPrint 
Printer List 

Specify 

AirPrint 

printer 

settings 




AirPlay 





- Configure AirPlay 
destinations 

Specify 

AirPrint 

printer 

settings 




Single Sign On 





- Configure Single 
Sign On via Kerberos 

Specify SSO 
settings via 
Kerberos 




VPN Profiles 

Specify VPN 

profile 

settings 




Email Profiles 

Specify email 

profile 

settings 




Exchange ActiveSync 
Profiles 





- Prevent Moving Mail 
to other Accounts 

Email cannot 
be moved or 
forwarded to 
other 
accounts 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 










/ 







iOS 7+ Only 









f 







iOS 7+ Only 









f 







iOS 7+ Only 

I 








f 








f 








f 







iOS 5+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Prevent Third Party 
Apps from Sending Mail 

The user 
cannot send 
emails from 
third-party 
apps on the 
devices 




- Prevent 

synchronization of 
Recent Contacts 

Recent 
contacts are 
not synced 




LDAP 

Specify LDAP 
settings 




CalDAV 

Specify 

CalDAV 

settings 




Subscribed Calendars 

Specify 
settings for 
calendar 
subscriptions 




CardDav 

Specify 

CardDav 

settings 




Web clips 

Specify web 
clip settings 




Certificates 

Specify 

certificate 

settings 




- Use of certificates 
in Wi-Fi, VPN, Email 

Specify if 
certificates 
will be used 
for Wi-Fi, VPN 
or email 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ Only 

/ 







iOS 6+ Only 

/ 








/ 








f 








I 








f 








I 








f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

SCEP 

Specify SCEP 
settings 




Access Point Carriers 

Specify 
settings for 
access point 
carriers 




Import iPCU Settings 

Import 
settings 
created in the 
iPhone 

Configuration 

Utility 




Supervised Settings 

Specify the 

supervised 

settings 




- Allow Gamecenter 

Gamecenter is 
allowed on 
the device 




- Allow Erotica 

Erotica is 
allowed on 
the device 




- Allow iMessage 

iMessage is 
allowed on 
the device 




- Enable Siri Profanity 
Filter 

Enable the Siri 

Profanity 

Filter 




- Allow Removing 
Apps 

The user can 
remove apps 
from the 
device 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








f 








I 








I 







iOS 6+ Only 

f 







iOS 6+ Only 

/ 







iOS 6+ Only 

f 







iOS 6+ Only 

f 







iOS 6+ Only 

/ 







iOS 6+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow iBookstore 

iBookstore can 
be installed on 
the device 




- Allow Interactive 
Installation of 
Configuration Profiles 

Allow 

configuration 
profiles to be 
installed 
interactively 




- Allow Account 
Modification 

The user can 
modify the 
account 




- Allow Cellular Data 
Usage Modifications 

The user can 
change which 
apps can use 
cellular data 




- Allow Find My 
Friends Modification 

The user can 
change the 
Find My 
Friends app 




- Allow Text Define in 
Safari 





- Whitelist AirPlay 
Devices 

Specify the 
devices that 
AirPlay can 
connect to 




Global Proxy 





- Configure Global 
Proxy 

Select to 
configure the 
global proxy 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 6+ Only 

f 







iOS 6+ Only 

f 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 









/ 







iOS 6+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Bypassing 
Proxy to Access Captive 
Networks 

Global proxy 
can be ignored 
to access 
captive 
networks 




- Allow Direct 
Connection if PAC is 
unreachable 

If the proxy 
automatic 
configuration 
cannot be 
found, a 
direct 
connection 
will be 
allowed 




App Lock 

App lock 
settings 




- Configure App Lock 

Configure the 
app lock 




-Allow Touch Input 

The user can 
touch the 
screen to 
enter data 




-Allow Device 
Rotation 

Turning the 
device will 
rotate the 
display 




-Allow Volume Button 
Control 

The user can 
change the 
device’s 
volume 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 7+ Only 

/ 







iOS 7+ Only 









/ 







iOS 6+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

-Allow Ringer Switch 
Control 

The user can 
turn off the 
ringer 




-Allow Sleep/Wake 
Button Control 

The user can 
use the 
sleep/wake 
controls 




-Allow Auto Lock 

The device 
will 

automatically 
lock after a 
specified 
period 




-Enable Voice Over 

The device 
can be set to 
provide 
voiceovers 




-Enable Zoom 

The image in 
the camera 
can be 
zoomed 




-Enable Invert Colors 

The colors in 
the display 
can be 
inverted for 
easier 
readability 




-Enable Assistive 
Touch 

Assistive touch 
can be used to 
simulate 
commonly use 
gestures 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 7+ Only 

f 







iOS 7+ Only 

f 







iOS 7+ Only 

f 







iOS 7+ Only 

f 







iOS 7+ Only 

f 







iOS 7+ Only 

/ 







iOS 7+ Only 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

-Enable Speaker 
Selection 

The user can 
select the 
speaker that 
will be used 




-Enable Mono Audio 

The device 
will produce 
mono audio 




-Allow Voice Over 
Adjustment 

The user can 
change the 
voiceover 




-Allow Zoom 
Adjustment 

The user can 
change the 
camera’s 
zoom 




-Allow Invert Color 
Adjustment 

The user can 
customize the 
colors when 
inverted 




-Allow Assistive Touch 
Adjustment 

The user can 
customize the 
assistive touch 
feature 




Web Content Filtering 





- Limit Adult Content 

Adult content 
cannot be 
viewed on the 
device 




- Limit Access to 
Specific Websites only 

The user can 
only access 
the listed 
websites 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

/ 







iOS 7+ Only 

f 







iOS 7+ Only 

f 







iOS 7+ Only 

/ 







iOS 7+ Only 









/ 







iOS 7+ Only 

/ 







iOS 7+ Only 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Configure Workplace 
Settings 





- Host name of the 
ActiveSync Server 

The host name 
of the 
ActiveSync 
server 




- Use SSL 

If the 
Workplace 
container can 
use SSL 




- Domain Name 

The domain 
name of the 
Workplace 
container 




- Account Username 

The username 
of the 
container 




- Email Address 

The email 
address of the 
container 




- Restrict Email 
Attachment sharing in 
the Container 

Email 

attachments 
received in 
the container 
cannot be sent 
outside it 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

f 







iOS 5+ only 

f 







iOS 5+ only 

f 







iOS 5+ only 

I 







iOS 5+ only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Max days to Mail to 
sync 

The maximum 
number of 
days before 
the mail in the 
container 
contacts the 
server 




- Max days to Calendar 
to sync 

The maximum 
number of 
days before 
the calendar 
in the 
container 
contacts the 
server 




- Block use of the 
Container when device 
is Out-of-Compliance 

The user 
cannot access 
the container 
when the 
device is out 
of compliance 
with security 
policies 




- Disable Copy- Paste 
outside Workplace 

Text inside 
the container 
cannot be 
copied or 
pasted outside 
it 




- Restrict Contact 
Export 

Contacts 
cannot be 
exported out 
of the 
container 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 


145 


MaaS360* 

by Fi herlink, an IBM company 




Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Enable Secure Browser 
Integration 

MaaS360 
Secure 
Browser will 
be included in 
the Workplace 
container 




- Enforce passcode on 
Workplace 

The user must 
enter a 
passcode to 
access the 
container 




- Allow Simple Passcode 

The 

Workplace 
passcode can 
be simple 




- Require Alphanumeric 
in Passcode 

The 

Workplace 
passcode must 
be 

alphanumeric 




- Allowed Idle Time 
before Auto- Lock 

How long the 
device may be 
idle before it 
is 

automatically 

locked 




- Minimum Passcode 
Length 

The minimum 
length of the 
container 
passcode 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Number of Failed 
Passcode Attempts 
Before Workplace Data 
is Selective Wiped 

How many 
times a 
passcode can 
be entered 
incorrectly 
before data in 
the container 
is wiped 




- Required Number of 
Special Characters 

The number of 
special 
characters 
that must be 
in the 
passcode 




- Maximum Passcode 
Age 

How old the 
passcode can 
be before it 
can be 
changed 




- Number of Unique 
Passcodes Required 
Before Reuse Allowed 

The number of 
unique 

passcodes that 
must be used 
before one 
can be reused 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 

/ 







iOS 5+ only 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Device Passcode Policy 

These settings 
apply for 
MaaS360, not 
for MaaS360 
Secure 
Productivity 
Suite (SPS) 




- Passcode Quality 

Specifications 
for the device’s 
passcode, 
including 

Pattern, 
Numeric, 
Alphabetic, 
Alphanumeric, 
and Complex 




- Minimum Passcode 
Length (4-16 
characters) 

The minimum 
length of the 
device’s 
passcode 




- Minimum Number 
of Complex Characters 

The minimum 
number of 
special 
characters or 
symbols that 
must appear in 
the passcode 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



f 

f 







f 

f 







f 

f 







f 






Android 
3.0+ only 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Maximum Passcode 
Age (in Days) 

How old the 
passcode can 
be before it 
can be changed 




- Allowed Idle Time 
(in minutes) Before 
Auto- Lock 

How long the 
device may be 
idle before it is 
automatically 
locked 




- Passcode history 

The number of 
unique 

passcodes that 
must be used 
before one can 
be reused 




- Number of Failed 
Passcode Attempts 
Before All Data is 
Erased (4-16) 

How many 
times a 
passcode can 
be entered 
incorrectly 
before all data 
is wiped 




Security Settings 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






Android 
3.0+ only 


/ 

/ 







/ 






Android 
3.0+ only 


/ 

/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Enforce Device 
Encryption 

The data on the 
device must be 
encrypted if 
the device 
supports 
hardware 
encryption. On 
SAFE devices, 
the passcode 
policy will 
automatically 
require a 6- 
digit 

alphanumeric 

passcode 




- Enforce SD Card 
Encryption 

Any SD cards 
used with the 
device must be 
encrypted 




- Visible Passwords 

The user can 
choose to make 
the passcode 
visible as it is 
being entered 




- Allow USB 
Debugging 

A USB device 
can be used for 
debugging 




- Allow SD Card 

SD cards are 
allowed 




- Allow SD Card 
Write 

Device data can 
be written to 
an SD card 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






Android 
3.0+ & 
Motorola 










/ 








/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 3.0+ 
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ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Disable Keyguard 
Features 

Prevents the 
user from 
setting 
Keyguard 
features 




- Allow Installation 
of Non-Google Play 
Apps 

The user can 
install apps 
that do not 
come from 
Google Play 




- Enforce App 
verification before 
install 

The app will be 
verified before 
it is installed 




- Allow Clipboard 

The Clipboard 
can be used 




- Allow Screen 
Capture 

Screen 

captures can be 
taken on the 
device 




- Backup my data 

Current 
settings and 
app data will 
be backed up 
to the Google 
servers 




- Automatic Restore 

Backed up 
settings and 
data will be 
restored when 
an app is 
reinstalled 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






Android 

4.2+ 


/ 








/ 






Android 

4.2+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 3.0+ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Google Crash 
Report 

The report will 
be sent 




- Allow Factory 
Reset 

The device can 
be restored to 
factory settings 




- Allow OTA Upgrade 

The device can 
be upgraded 
over the air 




Device Restrictions 





- Enable Background 
Data Synchronization 

Devices can 
sync, send or 
receive data 
any time 




- Auto-Sync 

The device can 
sync 

automatically 




- Camera 

The device’s 
camera can be 
used 




- Bluetooth 

Bluetooth can 
be used 




- Allow USB Mass 
Storage 

Data can be 
stored on a USB 
device 




- Allow USB Media 
Player (MTP, PTP) 

The device can 
be used with a 
USB media 
player 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 3.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 3.0+ 










/ 

/ 







/ 








/ 








/ 








/ 








/ 






SAFE 2.0+ 
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ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Microphone 

The device’s 
microphone can 
be used 




- Near Field 
Communication (NFC) 

Devices can 
communicate 
via NFC 




- Use Network- 
provided Date fit Time 

The device’s 
date and time 
data will come 
from the 
network 




- Use Wireless 
Networks / Google's 
Location Service for 
Location Detection 

Wireless 
networks or 
Google’s 
location service 
will be used to 
determine the 
device’s 
location 




- Use GPS satellites 
for Location Detection 

GPS satellites 
will be used to 
determine the 
device’s 
location 




- Use sensor aiding 
for Location Detection 

Sensors will be 
used to 
determine the 
device’s 
location 




- Allow Mock 
Locations 

Mock locations 
can be used. 




Network Restrictions 







iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.0+ 


/ 








/ 








/ 








/ 








/ 






SAFE 3.0+ 


/ 
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Exchange 

ActiveSync 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Emergency 
Calls only 

Only 

emergency 
calls can be 
made from the 
device 




- Allow Wi-Fi 

Wi-Fi can be 
used on the 
device. There 
is no effect on 
a Wi-Fi only 
device 




- Whitelisted SSIDs 

Network SSIDs 
that are 
allowed. Be 
sure you do not 
whitelist an 
invalid SSID 




- Blacklisted SSIDs 

Network SSIDs 
that are 
prohibited 




- Wi-Fi Network 
Minimum Security 
Level 

Specifies the 
minimum 
amount of 
security the 
network can 
have 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


f 






SAFE 2.2+ 


f 






SAFE 2.2+ 


I 






SAFE 2.0+ 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow user to add 
Wi-Fi networks 

The user can 
add Wi-Fi 
networks. This 
setting will be 
disabled if one 
or more Wi-Fi 
profiles are 
defined in the 
device’s 
policies. 




- Allow Data 
Network 

The user can 
add data 
networks 




- Mobile AP 

The device can 
be a mobile 
access point 
hot spot. Other 
devices can 
connect to its 
cellular 
Internet 
connection 




- USB Tethering 

The user can 
perform USB 
tethering with 
the device 




- Allow SMS & MMS 

The device can 
be used to send 
SMS and MMS 
messages 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.0+ 


/ 








/ 






SAFE 2.2+ 


/ 








/ 






SAFE 3.0+ 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Data 
Roaming 

The device can 
send and 
receive data 
while roaming 




- Allow Sync during 
Roaming 

The device can 
sync with 
servers while 
roaming 




- Allow Voice 
Roaming 

The user can 
make calls 
while roaming 




App Compliance 





- Configure 

Restricted Applications 
(App Blacklist) 

Specify which 
apps cannot be 
installed on the 
device 




- Configure Allowed 
Applications (App 
White list) 

Specify which 
apps are 
allowed on the 
device 




- Configure Required 
Applications 

Specify which 
apps are 
required on the 
device 




Native App 
Compliance 





- Allow Google Play 

The Google 
Play app is 
allowed on the 
device 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 








/ 






SAFE 1.0+ 


f 






SAFE 3.0+ 










f 

/ 







I 

/ 







I 

/ 















f 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow YouTube App 

The YouTube 
app is allowed 
on the device 




- Allow Email 

Email can be 
used on the 
device 




- Allow Browser 

The native 
browser can be 
used on the 
device 




- Allow Settings 

The user can 
change the 
device’s 
settings 




- Allow Gallery 

The Google 
photo app can 
be installed on 
the device 




- Allow Gmail 

Gmail can be 
used on the 
device 




- Allow Google Maps 
fit Navigation 

Google Maps 
and navigation 
can be used on 
the device 




- Allow Voice Dialer 

The voice 
dialer can be 
used on the 
device 




Wi-Fi Profile 

Configure your 
Wi-Fi profile 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 








/ 

/ 







/ 

/ 







/ 

/ 







/ 

/ 







/ 

/ 







/ 

/ 







/ 








/ 

/ 
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Notes 
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Description 

Cloud Extender 

VPN Profile 

Configure your 
VPN profile 




Email Profile 

Configure your 
Email profile 




ActiveSync Profile 

Configure your 

ActiveSync 

profile 




- Host name of the 
Server 

Host name of 
the server 




- Use SSL 

If the device 
can use SSL 




- Account 

The account ID 




- Identity Certificate 

The identity 
certificate 




- Account Display 
Name 

The account 
display name 




- Set as Default 
Account 

This is the 
default account 




- Accept All 
Certificates 

All certificates 
should be 
accepted 




- Prompt User to 
Install TouchDown 

The user will 
be prompted to 
install the 
TouchDown app 




- License Key 

The license key 
for MaaS360 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






Motorola, 
SAFE 2.0+ 


/ 






SAFE 2.0+ 


f 

/* 





"Motorola, 
SAFE 2.0+, 

TouchDown 

* 

y 

TouchDown 


I 

/* 







f 

/* 







I 

/* 















I 






SAFE 1.0+ 


I 






SAFE 1.0+ 


f 






SAFE 1.0+ 


/ 

/* 







/ 

/* 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Exchange Security 
Settings 





- Configure 
TouchDown Passcode 

The TouchDown 
passcode 




- Suppress 
TouchDown specific 
Passcode policy 
enforced via 
ActiveSync 

Suppress any 
Touch Down - 
specific 

passcode policy 
that is being 
enforced by 
EAS 




- Encrypt Emails 

Encrypt all 
emails 




- Encrypt 
Attachments 

Encrypt all 
attachments 




- Allow Backup of 
Emails and Settings 

Allow emails 
and settings to 
be backed up 
to the EAS 
server 




- Disable Copy of 
Contacts to Phone 

Do not allow 
contacts on the 
EAS server to 
be copied to 
the device 




- Disable Copy- Paste 
from Email 

Restrict 
copying and 
pasting from 
emails 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 











/ 

/* 







f 

/* 







I 

/* 







/ 

/* 







/ 

/* 







/ 

/* 







/ 

/* 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Device Type 
reported in Exchange 
Server 

Device type 
that is reported 
in the EAS 
server 




- Prevent Moving 
Mail to other Accounts 

Mail cannot be 
moved or 
forwarded to 
other accounts 
on the device 




- Allow HTML 
Formatted Email 

Allow emails 
formatted in 
HTML on the 
device 




- Maximum Email 
Size (KB) 

The maximum 
size for an 
email 




- Include Past Emails 
for Selected Date 
Range 

Old emails for 
the date range 
can be loaded 
onto the device 




- Include Past 
Calendar Items for 
Selected Date Range 

Old events for 
the date range 
can be loaded 
onto the device 




- Allow Attachments 

The device can 

receive 

attachments 




- Maximum 
Attachment Size (KB) 

The maximum 
size for an 
attachment 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

/* 







/ 






SAFE 2.1 + 


/ 

/* 







/ 

/* 







/ 

/* 







/ 

/* 







/ 

/* 







/ 

/* 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Sync Contacts 

Contacts can 
be synced with 
the server 




- Sync Calendar 

Calendar 
events can be 
synced with the 
server 




- Sync Tasks 

Tasks can be 
synced with the 
server 




- Sync Notes 

Notes can be 
synced with the 
server 




- Email Signature 

Specify the 
signature that 
will appear at 
the bottom of 
all emails sent 
from the device 




- Allow User to 
change Email 
Signature 

The user can 
change the 
email signature 




- Manual Sync when 
Roaming 

The device 
must be synced 
manually when 
roaming 




- Enable TouchDown 
Widgets 

The user can 
use TouchDown 
widgets on the 
device 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.1 + 


/ 






SAFE 2.1 + 


/ 






SAFE 2.1 + 


/ 






SAFE 2.1 + 


/ 

/* 







/ 

/* 







/ 

/* 







/ 

/* 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Always Vibrate on 
New Email Notification 

The device will 
vibrate when it 
receives a new 
email 




- Vibrate on New 
Email Notification if 
device is silent 

The device will 
vibrate when it 
receives a new 
email and the 
ringer has been 
turned off on 
the device 




- Generic 

TouchDown Policies 





Web Clips (shortcuts) 

The device can 
use web clips 




Wallpapers 

The device can 
use wallpapers 




Browser Restrictions 





- Allow Pop-ups 

The browser 
will allow pop- 
ups 




- Allow JavaScript 

The browser 
will allow 
JavaScript 




- Accept Cookies 

The browser 
will accept and 
use cookies 




- Remember Form 
Data for later use 

Data in forms 
will be 
remembered 
for reuse 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 1.0+ 


/ 






SAFE 1.0+ 


/ 

/* 







/ 

/ 







/ 

/ 















/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 
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ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Show Fraud 
Warning Settings 

If the user 
attempts to 
access a 
potentially 
fraudulent web 
site, warnings 
will be 
displayed 




Bluetooth Restrictions 





- Allow Device 
discovery via 
Bluetooth 

The device can 
be discovered 
by Bluetooth 




- Allow Bluetooth 
Pairing 

The device can 
be paired via 
Bluetooth 




- Allow Bluetooth 
Headset devices 

Bluetooth 
headsets can 
be used with 
the device 




- Allow Bluetooth 
Hands-free devices 

Bluetooth 
hands-free 
devices can be 
used 




- Allow Bluetooth 
A2DP (Advanced Audio 
Distribution Profile) 
devices 

Bluetooth A2DP 
devices can be 
used 




- Allow Outgoing 
Calls 

The device can 
be used to 
make outgoing 
calls 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.0+ 










/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


f 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allow Data 
Transfer via Bluetooth 

Data can be 
transferred via 
Bluetooth 




- Allow Bluetooth 
Tethering 

Bluetooth 
tethering is 
available on 
the device 




- Allow connection 
to Desktop or Laptop 
via Bluetooth 

The device can 
connect to a 
desktop or 
laptop via 
Bluetooth 




Kiosk mode 
restrictions 





- Enable Kiosk Mode 

The device is in 
kiosk mode. It 
is restricted to 
specific apps 




- Allowed apps in 
Kiosk mode 

Specify the 
apps that are 
allowed on the 
device 




- Block Task Manager 

Task Manager 
cannot be used 




- Hide System Bar 

Hide the 
system bar o 




- Block Hardware 
Keys 

The keys on the 
device cannot 
be used-only 
the touch 
screen is 
available 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 2.0+ 


/ 






SAFE 3.0+ 


/ 






SAFE 3.0+ 


/ 






SAFE 3.0+ 


/ 






SAFE 3.0+ 


/ 






SAFE 3.0+ 


/ 






SAFE 3.0+ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Action on Disabling 
Device Management 

What MaaS360 
will do if the 
user removes 
the MaaS360 
app 




Warning Message on 
Disabling Device 
Management 

Specify the 
message the 
user will 
receive if the 
MaaS360 app is 
removed 




User Grace Period to 
Determine Device Out- 
of-Compliance 

The grace 
period before a 
device is 
considered out 
of compliance 




Enforcement Action 
when the Device is Out 
of Compliance 

The action 
taken by 
MaaS360 if the 
device is out of 
compliance 




Data Collection Timer 
Frequency 

How often 
compliance 
data is 

collected from 
the device. 
Reducing this 
will preserve 
the device’s 
battery 




Workplace Settings 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 

/ 







/ 

/ 







/ 

/ 







/ 

/ 







/ 

/ 







/ 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Configure Workplace 
Settings 

Select to 
configure 
Workplace 
settings 




- Host name of the 
ActiveSync Server 

The host name 
of the 
ActiveSync 
server 




- Use SSL 

If the 
Workplace 
container can 
use SSL 




- Domain Name 

The domain 
name of the 
Workplace 
container 




- Account Username 

The username 
of the 
container 




- Email Address 

The email 
address of the 
container 




- Restrict Email 
Attachment sharing in 
the Container 

Email 

attachments 
received in the 
container 
cannot be sent 
outside it 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 








/ 








/ 








/ 








/ 








/ 








/ 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Block use of the 
Container when device 
is Out-of-Compliance 

The user 
cannot access 
the container 
when the 
device is out of 
compliance 
with security 
policies 




- Disable Copy- Paste 
outside Workplace 

Text inside the 
container 
cannot be 
copied or 
pasted outside 
it 




- Disable Screenshots 

Screen 
captures 
cannot be 
taken with the 
device 




- Enable Secure 
Browser Integration 

MaaS360 Secure 
Browser will be 
included in the 
Workplace 
container 




- Use Secure Viewer 

The Secure 
Viewer can be 
used 




- Enforce passcode on 
Workplace 

The user must 
enter a 
passcode to 
access the 
container 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 








/ 








/ 








/ 








/ 








/ 
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ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Allowed Idle Time 
before Auto- Lock 

How long the 
device may be 
idle before it is 
automatically 
locked 




- Require 
Alphanumeric in 
Passcode 

The Workplace 
passcode must 
be 

alphanumeric 




- Minimum Passcode 
Length 

The minimum 
length of the 
container 
passcode 




- Number of Failed 
Passcode Attempts 
Before Workplace Data 
is Selective Wiped 

How many 
times a 
passcode can 
be entered 
incorrectly 
before data in 
the container is 
wiped 




- Required Number of 
Special Characters 

The number of 
special 

characters that 
must be in the 
passcode 




- Maximum Passcode 
Age 

How old the 
passcode can 
be before it 
can be changed 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 



/ 








/ 








/ 








/ 








/ 








/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Device Passcode 
Restrictions 

Specify how 
passcodes are 
handled on the 
device 




- Allow Simple 
Passcode 

The device’s 
passcode can be 
simple 




- Passcode 
Quality 

Specifications for 
the device’s 
passcode 




- Minimum 
number of 
character sets (1- 
4 chars) 





- Minimum 
Passcode length 
(4-18) 

The minimum 
length of the 
container passcode 




- Maximum 
Passcode Age(1- 
730 days) 

How old the 
passcode can be 
before it can be 
changed 




- Allowed Idle 
Time (in minutes) 
Before Auto- Lock 
(1-999) 

How long the device 
may be idle before 
it is automatically 
locked 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 






/ 








/ 








/ 








/ 








/ 








/ 








f 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Number of 
Unique Passcodes 
Required Before 
Reuse Allowed (1- 
50) 

The number of 
unique passcodes 
that must be used 
before one can be 
reused 




- Number of 
Failed Passcode 
Attempts Before 
All Data Is Erased 
(1-999) 

How many times 
the incorrect 
passcode can be 
entered before the 
device is wiped 




Security Settings 





- Enforce Device 
Encryption 

The device must be 
encrypted 




- Disable SD 
Card 

An SD card cannot 
be used with the 
device 




Email Profiles 





Exchange 

ActiveSync 

Profiles 





- Account name 
for the ActiveSync 
Server 

The account name 
for the EAS server 




- End users will 
see the mailbox 
with this name 

The mailbox name 
displayed to the 
users 




- Host name for 
the ActiveSync 
Server 

The host name for 
the EAS server 




- Use SSL 

Use SSL 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 






/ 








/ 
















/ 








/ 








/ 








/ 








/ 








/ 








/ 








f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Domain Name 

The domain name 




- Account 
Username 

The account 
username 




- Email Address 

The email address 
for the account 




- Account Icon 

An icon for the 
account 




- Sync Emails 

Emails should be 
synced with the 
server 




- Sync Calendar 

Calendar items 
should be synced 
with the server 




- Sync Contacts 

Contacts should be 
synced with the 
server 




- Sync Tasks 

Tasks should be 
synced with the 
server 




- Sync Frequency 

How often data 
should be synced 
with the server 




- Download Email 
Period 

How often emails 
should be 
downloaded from 
the server 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 






/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

Device Passcode 
Restrictions 





- Allow Simple 
Passcode 

The device can 
have a simple 
passcode 




- Minimum 
Passcode Length 
(4-16 characters) 

The minimum 
length of the 
passcode 




- Minimum 
Number of Complex 
Characters 

The minimum 
number of 
complex 

characters in the 
passcode 




- Maximum 
Passcode Age (in 
Days) 

How old the 
passcode can be 
before it can be 
changed 




- Allowed Idle 
Time (in minutes) 
Before Auto- Lock 

How long the 
device can be idle 
before it is 
automatically 
locked 




- Passcode 
history 

Previously used 
passcodes 




- Number of 
Failed Passcode 
Attempts Before All 
Data is Erased (4- 
16) 

How many times a 
passcode can be 
entered 

incorrectly before 
all data is wiped 




Device Restrictions 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
















/ 








/ 








/ 








f 








/ 








/ 








/ 
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Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Restrict System 
Preferences 

Displays system 
restrictions you 
can enable 




- Media: Restrict 
Network Media 

Restrict access to 
network media 




- Media: Access 
Settings for AirDrop 

Restrict access to 
AirDrop 




- Media: Restrict 
Hard Disk Media 
Access 

Restrict access to 
hard disk media 




- Media: Allow 
Internal Disks 

Restrict access to 
internal disks 




- Media: Allow 
Internal Disks: 
Enforce 
Authentication 

Allow access to 
internal disks, but 
users must enter 
credentials 




- Media: Allow 
Internal Disks: 
Enforce Read Only 
Permissions 

Allow read-only 
access to internal 
disks 




- Media: Allow 
External Disks 

Allow the use of 
external disks 




- Media: Allow 
External Disks: 
Enforce 
Authentication 

Allow access to 
external disks, but 
users must enter 
credentials 




- Media: Allow 
External Disks: 
Enforce Read Only 
Permissions 

Allow read-only 
access to external 
disks 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








f 
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Lotus 
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BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Media: Allow Disk 
Images 

Allow access to 
disk images 




- Media: Allow Disk 
Images: Enforce 
Authentication 

Allow access to 
disk images, but 
users must enter 
credentials 




- Media: Allow Disk 
Images: Enforce 
Read Only 
Permissions 

Allow read-only 
access to disk 
images 




- Media: Allow 
DVD-RAM 

Allow the use of 
DVD-RAM 




- Media: Allow 
DVD-RAM: Enforce 
Authentication 

Allow the use of 
DVD-RAM, but 
users must enter 
credentials 




- Media: Allow 
DVD-RAM: Enforce 
Read Only 
Permissions 

Allow read-only 
access to DVD-RAM 




- Media: Disk 
Media Access 

Allow the use of 
removable disk 
media 




- Media: Allow 
Access for CDs & 
CD-ROMs 

Allow the use of 
CDs and CD-ROMs 




- Media: Require 
Authentication for 
CDs & CD-ROMs 

Users must enter 
credentials to use 
CDs and CD-ROMs 




- Media: Allow DVD 
Access 

Allow the use of 
DVDs 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








/ 








/ 








f 








f 








/ 








/ 








/ 








f 








f 
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BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Media: Require 
Authentication for 
DVDs 

Users must enter 
credentials to use 
DVDs 




- Media: Allow 
access for 
Recordable disks 

Allow use of 
recordable disks 




- Media: Eject at 
Logout 

All removable 
media will be 
ejected at logout 




Wi-Fi Profiles 





- Auto Join 

Available networks 
will be joined 
automatically 




- Proxy Settings 

Information about 
the proxy server 




VPN Profiles 

Information about 
the VPN 




Certificate 

Credentials 

Credentials 
needed to add 
certificates on the 
device 




Security fit Privacy 





- Send diagnostic 
and usage data to 
Apple 

Data will be sent 
to Apple daily 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








f 








I 
















f 








I 








f 








f 
















f 
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Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Gatekeeper 

Specifies where 
apps on the device 
can come from, 
either the Mac App 
Store and specified 
app developers, or 
just the Mac App 
Store 




- Do not allow user 
to override 
Gatekeeper setting 

Prevents the user 
from temporarily 
overriding the 
Gatekeeper setting 
by using 
<Ctrl>+click to 
install any app 




Software Update 





- Configure 
Software update 
server 





Energy Saver 





- Energy Saver 
Settings for 
Desktop 





- Energy Saver 
Settings for 
Portable Battery 





- Energy Saver 
Settings for Power 
Adapter 





- Schedule Mac 
Power on Timings 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








/ 








/ 








/ 








f 








/ 








/ 








f 








I 
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BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Schedule Mac 
Power Off/ Standby 
Timings 





Printing 

Configures printers 
used by the device 




- Configure Printer 
Details 





- Printer Settings: 
Set Default 





- Printer Settings: 
Allow user to 
modify the list 





- Printer Settings: 
Allow printers that 
directly connect to 
computers 





- Printer Settings: 
Show Only Managed 
Printers 





- Footer Settings: 
Include MAC 
Address 





- Footer Settings: 
Font Name 





- Footer Settings: 
Font Size 





Login Window 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 
















/ 








/ 








/ 








/ 








/ 








/ 








f 








f 











177 


MaaS360* 

by Fi herlink, an IBM company 




Exchange 

ActiveSync 
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Enterprise 


Description 

Cloud Extender 

- Window: Heading 

Specify the 
heading displayed 
on the login 
window 




- Window: Message 

Specify a message 
to be displayed on 
the login window 




- Window: Style 

Specify a style for 
the login window 




- Window: Show 
Shut Down Button 

Display the 
shutdown button 
on the login 
window 




- Options: Show 
password hint 

Display a password 
hint when needed 
and available 




- Options: Disable 
Automatic Login 

Disable the 
automatic login 




- Options: Enable 
>console login 





- Options: Enable 
Fast User Switching 

Different users can 
be changed quickly 
on the device 




- Options: 
Configure Auto 
logout 





- Options: Allow 
Computer admins 
to refresh or 
disable 
management 

Administrators can 
refresh or disable 
management 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








/ 








f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Options: Set 
computer name to 
computer record 
name 





- Options: Enable 
external accounts 





- Options: Allow 
Guest User 





- Options: Start 
screen saver 





Configure Login 
Items 





- Configure Items 
to launch and hide 
on login 

Specify items to be 
launched or hidden 
at login 




- Configure Files 
and Folders to 
launch and hide on 
login 

Specify folders to 
open at login 




- Configure 
network mounts on 
login 

Specify network 
mounts to be used 
at login 




- Allow User to 
suppress opening of 
certain items by 
using Shift Key 





Email 





- Configure IMAP 
Accounts 

Settings for IMAP 
accounts 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 








/ 








/ 








/ 
















/ 








f 








f 








f 
















f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Configure POP 
Accounts 

Settings for POP 
accounts 




Exchange 

ActiveSync 





- Prevent Moving 
Mail to other 
Accounts 





- Use only in Mail 





- Configure 
Internal and 
External Exchange 
Hosts 





- Enforce SSL 





- Configure no. of 
days to sync 






iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 








/ 
















f 








/ 








/ 








f 











180 


MaaS360* 

by Fi herlink, an IBM company 


Secure Browser Policies 




Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

URL Filtering Settings 





- Select URL 
Categories to Allow or 
Block 

Specify the 
category and 
choose the 
action to be 
taken when the 
user tries to 
access a site in 
that category 




- Enter Domain Name 
Category Exceptions 

Specify any 
domains within a 
restricted 
category that 
should be 
allowed 




- Enter Email Address 
for Notifications 

Specify the 
notification 
recipient 




- Enable Text 
Notification 

Provide the text 
that will appear 
when a user tries 
to access a 
blocked site, up 
to 255 

characters. Basic 
HTML formatting 
is supported 





iOS 

Android 

Kindle 

Win 

Win 

Windows 



Fire 

Phone 

Phone 

Laptops 




7.5 

8 



Mac 


Comments 


Requires Native App on Device 


/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Enable HTML 
Notification 

Provide custom 
HTML content 
that will appear 
when a user tries 
to access a 
blocked site. You 
can upload HTML 
files by clicking 
the Policy Files 
button on the 
Policies screen. 




- Enable URL Redirect 

Provide the URL 
that the user will 
be sent to when 
attempting to 
access a blocked 
URL 




- Send Notification on 
Block Events 

Specify if the 
administrator 
should be 
notified when a 
user attempts to 
access a blocked 
URL 




- Notification 
Threshold Events 
(occurrences) 

Specify how may 
time a user can 
visit a blocked 
site before the 
administrator 
receives a 
notification 





iOS 

Android 

Kindle 

Win 

Win 

Windows 



Fire 

Phone 

Phone 

Laptops 




7.5 

8 



Mac 


Comments 


Requires Native App on Device 


f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Notification 
Threshold Time (in 
hours) 

Specify the time 
between 
multiple 
attempts to 
access blocked 
sites before a 
notification is 
triggered 




- Data Collection 
Frequency (in minutes) 

Specify how 
often data about 
the device is 
collected 




- Visited Site Upload 
Frequency (in minutes) 

Specify how 
often the sites 
visited by the 
user are 
uploaded to 
MaaS360 




- Data Group 
Frequency (in minutes) 

Specify when the 
visited URL 
domain 

information will 
be rolled up into 
MaaS360 




- Heartbeat Frequency 
(in minutes) 

Specify how long 
before M aaS360 
checks for policy 
changes and new 
assignments 





iOS 

Android 

Kindle 

Win 

Win 

Windows 



Fire 

Phone 

Phone 

Laptops 




7.5 

8 



Mac 


Comments 


Requires Native App on Device 


f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Description 

Cloud Extender 

- Configure as default 
browser on Android 

Specify if the 
Secure Browser 
will be the 
default for 
Android devices 




- Accept Cookies 

Specify if the 
device can 
accept cookies 




- Disable Print 

Prevent the user 
from printing 
from the device 




- Disable Copy/ Paste 

Prevent the user 
from copying and 
pasting text 




- Enable File 
Downloads 

Allow files to be 
downloaded onto 
the device 




Mobile Enterprise 
Gateway for Intranet 
access 

Use the MaaS360 
Mobile 
Enterprise 
Gateway for 
Internet access 





iOS 

Android 

Kindle 

Win 

Win 

Windows 



Fire 

Phone 

Phone 

Laptops 




7.5 

8 



Mac 


Comments 


Requires Native App on Device 


f 
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Compliance/ Rules Engine 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Enforce Application 
Compliance 




Enforce Encryption Support 




Enforce Enrollment 

/ 

/ 


Enforce OS Versions 
(Minimum or Specific 
versions) 

/ 

/ 


Enforce Remote Wipe 
Support 

/ 



Monitor OS Version Changes 




Monitor Roaming Changes 




Monitor SIM Changes 




Restrict Corp Resources for 
Blocked Devices 




Restrict Jailbroken (iOS) or 
Rooted (Android) Devices 




Enable Geofencing 





Apps 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

f 

f 






/ 

f 

f 


/ 




/ 

I 

/ 


/ 




/ 

I 

/ 


/ 




/ 

I 

/ 


/ 




/ 

I 

/ 

/ 

/ 




/ 

I 







/ 

I 







/ 

f 

f 






/ 

f 

f 






/ 

I 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

MaaS360 Application 
Catalog (Public Apps) 




- Specify Region for all 
download 




- Remove app on MDM 
profile removal 




- Remove app on 
Selective Wipe 




- Remove app on 
Stopping Distribution 




- Remove app on 
Signout from Shared 
Device 




- Restrict backup to 
iTunes for app data 




MaaS360 Application 
Catalog (Private Apps) 




- Remove app on M DM 
profile removal 




- Remove app on 
Selective Wipe 




- Remove app on 
Stopping Distribution 




- Remove app on 
Signout from Shared 
Device 




- Restrict backup to 
iTunes for app data 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

/ 

/ 

/ 




/ 








/ 

f 



f 



SAFE 2.0+ 

f 

f 






SAFE 2.0+ 

f 








I 








f 








f 

f 

f 

f 

f 

f 



f 

f 



f 



SAFE 2.0+ 

/ 







SAFE 2.0+ 

/ 








/ 








/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

- Enforce 
Authentication 




- Restrict 
Cut/Copy/Paste 




- Enforce Compliance 




- Update iOS 
Provisioning Profile 




- Upgrade App 




Restricted Applications 
(App Blacklist) 




Allowed Applications (App 
White list) 




Required Applications 




Apple Volume Purchase 
Program (VPP) 




Manage Provisioning 
Profiles 





Documents 


Document Management 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








/ 








f 








I 








f 




/ 




f 

f 

/ 






f 

f 

f 






f 

f 

f 






f 







Support for 
both old 
(till iOS 
6.x) and 
new (iOS 
7+) VPP 
Programs 

f 

- 

- 

- 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Admin driven Document 
Distribution 




MaaS360 hosted documents 




Custom URL support 




SharePoint integration 




Windows File Share 
integration 




Folder Support 




Inbuilt Secure Viewer 





Document Policies 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Restrict Access on 
Jailbroken devices 




Restrict Export 




Restrict Cut/Copy/ Paste 




Password Protected 




Download Automatically 




Download only on Wi-Fi 




Hide Doc Preview in App 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

/ 






f 

/ 

f 






/ 

/ 

/ 






/ 

/ 

/ 






/ 








/ 








f 

/ 








iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 








f 

/ 







f 








/ 








f 








f 








/ 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Restrict Delete after 
Download 




Allow Whitelisted Apps 




Restrict Secure Mail 




Override Persona Policies 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 








f 








/ 








/ 









Mobile Expense Management 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Monitor In-Network 
Mobile Data Usage 




Monitor Roaming 
Mobile Data Usage 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


f 

/ 







/ 

/ 








End User Portal 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Device Visibility 

/ 

/ 

/ 

Last Known Location 




Locate Device 




Lock Device 




Refresh Device 
Information 




Remote Device Wipe 
(Full) 

/ 

/ 

/ 

Reset Device 
Passcode 



f 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

/ 

/ 

/ 

/ 

/ 

/ 


/ 



/ 






/ 







/ 

f 

f 






/ 

f 

f 

/ 





/ 

I 

I 






/ 

f 

f 
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Mobility Intelligence Reports 

Mobile Devices 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Mobile Devices 




MDM Overview 

/ 

f 

f 

Hardware Inventory 

/ 

f 

f 

Network 



I 

BlackBerry Details 



/ 

Apps Installed 



/ 

Security Overview 



/ 

Browser Violations 




Mobile Data Usage 
Overview 




Mobile Data Usage 
Analysis 





Computers 



Exchange 

Lotus 

BlackBerry 


ActiveSync 

Notes 

Enterprise 


iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 










/ 

/ 

f 

/ 

/ 




/ 

/ 

f 

/ 

/ 




/ 

/ 

I 

/ 

/ 












/ 

/ 

/ 






I 

/ 

/ 


/ 




f 

f 

/ 






f 

f 







f 

f 








iOS 

Android 

Kindle 

Win 

Win 

Windows 

Mac 

Comments 



Fire 

Phone 

Phone 

Laptops 






7.5 

8 
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Cloud Extender 

PC Overview 




Hardware Inventory 




Network 




Operating System 




Software 




Windows 7 fit 8 
Readiness 




PC Security 




Anti-Virus 




Personal Firewall 




Encryption 




Backup fit Recovery 




Patches 





Requires Native App on Device 







/ 








/ 








f 








f 








/ 








/ 








/ 








/ 








f 








/ 








/ 








f 




Cloud Extender 



Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Cloud Extender for Active 
Directory Authentication (for 
unattended enrollment only) 




Cloud Extender for BES 



/ 

Cloud Extender for 
Exchange/ActiveSync 

/ 




iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 


/ 

f 

/ 

f 

/ 

/ 

f 
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Exchange 

ActiveSync 

Lotus 

Notes 

BlackBerry 

Enterprise 


Cloud Extender 

Cloud Extender for Lotus Traveler 


/ 


Cloud Extender for Certificate 
Authority integration 





iOS 

Android 

Kindle 

Fire 

Win 

Phone 

7.5 

Win 

Phone 

8 

Windows 

Laptops 

Mac 

Comments 

Requires Native App on Device 










/ 

/ 
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